2e4e32a0e212f408741d051d8df9a20c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e4e32a0e212f408741d051d8df9a20c_JaffaCakes118
Size

498KB
MD5

2e4e32a0e212f408741d051d8df9a20c
SHA1

5d26991475fc4106fe33c63d6b7f960eeff7a652
SHA256

f8b1eb3f82766e6bc55b37b2e63750c65efabd5a5b19f9e67840069c6fbfcb02
SHA512

46f2fb8abc8d595ad26a6b869ac0b6e591a06f436d5b27563803dbe12c5b0539a431d6e0ac1953d509c1205d038a0b29e38848bd716caac13c85303133cfb4d6
SSDEEP

6144:hKmpycsZyhC36BKbA4d7oRYsHC4qxwjImiz1A3ScEM8yx9LZVLv/3QHVKNeURJDb:HmyhC36BkA4d4qxwJ04pfv/3uVKNz1b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e4e32a0e212f408741d051d8df9a20c_JaffaCakes118

Files

2e4e32a0e212f408741d051d8df9a20c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mspaint.pdb

Sections

.text
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qnk
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE