2c59f3e5ef73d7e56e9849f817f83079_JaffaCakes118 | Triage

Sharing

General

Target

2c59f3e5ef73d7e56e9849f817f83079_JaffaCakes118
Size

621KB
MD5

2c59f3e5ef73d7e56e9849f817f83079
SHA1

412837204e2375f0cdcebbee93eefe7ce9c37cf4
SHA256

f0f0a07f8abcf0febd18dbebc987ce6d232d629809e363c8c5745799c7ed5928
SHA512

614f0de22471cad2d79aa61e740e1b06cbaccc6b6e1ab7b4b24d1106a7f9bd679261f3e60749322dbb94de7544538ca915c3a66b41cc69d21b0008f1efa5e9a2
SSDEEP

12288:e9dQaMgfQgKGfiLZPj57XD+s5jFY8b2HT0Cl8+mAkJdogSPSwEjAkGcwfg7ZsCXr:e9dLMgdTfm/5jm0kSfdqPSw0AkGcwY71

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c59f3e5ef73d7e56e9849f817f83079_JaffaCakes118

Files

2c59f3e5ef73d7e56e9849f817f83079_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mjg
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE