2e55c9b16aea6ea59d332c906cf178a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e55c9b16aea6ea59d332c906cf178a0_JaffaCakes118
Size

746KB
MD5

2e55c9b16aea6ea59d332c906cf178a0
SHA1

be8b036b1bfdcad8949a1673fdb9c3a13adfd688
SHA256

8975631c358ea068ae0100efe7f9f95da7c9e748e3b97565058ec2fe11130a16
SHA512

60df9fd1b9fcaa21838cc267b35d43ad58caf321f378fbe0e2147b4c94ed3011dbcea010bc732f77b33de469ce9a186df35c3dc70ab5711f82414b47a4535aac
SSDEEP

12288:5na9bijcbI0MmIITjvL6P+4ncOLIvgpU3tcvS38LCJQBtdGs1rBLsJ:5naxo+OmIITjR4nFIvgpUdkS3rJQBtUZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e55c9b16aea6ea59d332c906cf178a0_JaffaCakes118

Files

2e55c9b16aea6ea59d332c906cf178a0_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ