2e31693214cbb7b053b4f1a874e31ece_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e31693214cbb7b053b4f1a874e31ece_JaffaCakes118
Size

322KB
MD5

2e31693214cbb7b053b4f1a874e31ece
SHA1

5fee3e79c3af4c026652c7d1e9dea72fa198059b
SHA256

2755bfe0d8b0b6e316113f967fe1b0fb760a3a6b9a60ba539103171723ccd4af
SHA512

efa546dc7c0750723c213f3d3b885157fc6336a5ff1ea0539814cc900e2c9d915fb9c2e117081c5bcff299c300e14519d29d130d6f651099727d67c011ffba90
SSDEEP

6144:azKC+QyTCSJ/XW5ApyFRpn1AWlreiYx/71gG07W+JMUdri9Z:PCR4x1XO+ygWciMA7pJx0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e31693214cbb7b053b4f1a874e31ece_JaffaCakes118

Files

2e31693214cbb7b053b4f1a874e31ece_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ScTasks.pdb

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 21B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nkh
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE