cea7ff44f9712cf84de08504eb99271f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cea7ff44f9712cf84de08504eb99271f_JaffaCakes118
Size

285KB
MD5

cea7ff44f9712cf84de08504eb99271f
SHA1

cddb5b736725e3a6cec992444c090e7b545fb8fb
SHA256

559fa49ca84ac18716ae859e56e0fb938c6aab903b53b2c5cb9d40bad47e52d9
SHA512

5053359a739062987edfd97949b767d3048d63e60cc504cca3cd448f0de5e1d2a46127e6f2c1830d970bbea83f6635bfc5a974deffb661cff49bd6be1b1b24d5
SSDEEP

6144:B2UDH5yvDXqFoW2Te1qwUspFl72xolpkNK36uHwF9oYdPIbPRp+:vGDXS51qwUiFlyx0mNK3UF9oKMp+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cea7ff44f9712cf84de08504eb99271f_JaffaCakes118

Files

cea7ff44f9712cf84de08504eb99271f_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

cscript.pdb

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.tqn
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE