721ea172ddfc207ef367647684939cd8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

721ea172ddfc207ef367647684939cd8_JaffaCakes118
Size

265KB
MD5

721ea172ddfc207ef367647684939cd8
SHA1

be733871312ba5d9b50faa17918a27824daaaa1e
SHA256

1dc69063fddcad7dee668292c0c70b90477cd82fa18f52c2e7b1c16cd39e3f61
SHA512

d8ae0ee743118cd6efef8a277dd7ec3cb905932eb2e4a87329728cac3664155b39465ab1039b8ef346615f82cf8db592983b48574d1d912cca5139a9c5e17572
SSDEEP

6144:3113eNgHpHbMjlCsJkMH5nScEMiL0pUc/2bapWb4:lgNgHlMjjbBS/MQ0pULbaI4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
721ea172ddfc207ef367647684939cd8_JaffaCakes118

Files

721ea172ddfc207ef367647684939cd8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

\\EXSYMBOLS\SYMBOLS\INTERNAL\SYM6944.0\ntx\rtl\USA\exe\EVENTS\events\events.pdb

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mjg
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE