2ce575c0a1b5773fa374440c776cec8d_JaffaCakes118 | Triage

Sharing

General

Target

2ce575c0a1b5773fa374440c776cec8d_JaffaCakes118
Size

6KB
MD5

2ce575c0a1b5773fa374440c776cec8d
SHA1

34192595db2036140c30f5d157dc26aeed094251
SHA256

49d49b0e2c4fc6153d433849157a71c92ebadd3e87a0444a8f11961b4b390b81
SHA512

00ec92023f3271a26910a3c6ead431ef48104de5a4b2ebe74408f96a553b202e5d4d1c1a217f89f29f5a83cd89bf6d328614ad7962daf04cde54c76c9944bc7a
SSDEEP

48:yXEv1LIlf56F9Y20jJ0txnNNjwPOgqLV/Y1v1eR8mGAhiaqB96b1z2UfJ:UOxYhKU0RNjwnqx/Y/eR8yqBc4YJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ce575c0a1b5773fa374440c776cec8d_JaffaCakes118

Files

2ce575c0a1b5773fa374440c776cec8d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 671KB - Virtual size: 670KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20.3MB - Virtual size: 20.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ