ce6ea8df606ed10a6ef2ac5af3ddcafa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce6ea8df606ed10a6ef2ac5af3ddcafa_JaffaCakes118
Size

384KB
MD5

ce6ea8df606ed10a6ef2ac5af3ddcafa
SHA1

2cc5b7132d07f698b273db6965c9bbd11d08dca4
SHA256

9bd5b3facdcc08c8eca160effbc35fcf4efa8727fd0637fe390aa0f7cf565169
SHA512

96ee3517d71a3c43ba408717d69f06c6c7821f461fb6c4c37ff4ac7292fe0ed5d5eb877e7babfb3b0ea3c049ef5d338cd2d687306fa14dbc51bd49ed196231a4
SSDEEP

6144:tMl3ME0Al6HIEJZMd8hXPOTtlPJsRQ7NxP+7+ma0TejgRYjV7E3Ocs/BPZDXCFS:tMlCHIWMOZkzNxP+KngRYq3Ocs5PFCU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce6ea8df606ed10a6ef2ac5af3ddcafa_JaffaCakes118

Files

ce6ea8df606ed10a6ef2ac5af3ddcafa_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 666KB - Virtual size: 666KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 1024B - Virtual size: 793B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ