2a7e366ffbdbfeb9ea4e885c0e8794c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a7e366ffbdbfeb9ea4e885c0e8794c3_JaffaCakes118
Size

328KB
MD5

2a7e366ffbdbfeb9ea4e885c0e8794c3
SHA1

76e83bda1e41c0e60bed4c3271d227ab7bd81b41
SHA256

91f28fa0219d7687bc8202d9109352173c9397755ac4a77041009eeb8a94b37f
SHA512

4ea81b4edbdc6de34093d8727a4706d8f786167856986c91435de3f0f8388bdc1e80c136bb4b82f0883ec93bd17ca0ace3878421fe43402e2f1d01a857b66402
SSDEEP

768:DMIOXGe7eLfFz3mQx4FvGce+AXdOGSDIn:gIOXg2qfJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a7e366ffbdbfeb9ea4e885c0e8794c3_JaffaCakes118

Files

2a7e366ffbdbfeb9ea4e885c0e8794c3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: 292KB - Virtual size: 292KB

.idata
Size: 626B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 420B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE