cee8579c051a3f542ac59e4bcf502e01_JaffaCakes118 | Triage

Sharing

General

Target

cee8579c051a3f542ac59e4bcf502e01_JaffaCakes118
Size

347KB
MD5

cee8579c051a3f542ac59e4bcf502e01
SHA1

49a2994d901e34b9ac8ee1971457322374705b9e
SHA256

7c058855fea75b76cfe875141b45ef86064b117133a19c332c7a576d6db0df2b
SHA512

52866054d213ff6a182f7be2a1f7f7b92ae1446c7d3db821619f15c114b4d7815851f7640900579ff8dd0c5d945779b3fab0fa8a8790e21075b992d780120b27
SSDEEP

6144:84h75B/BQ0jpbe22QH1ui1JN82dkWPtAxdAG/LKz08GeeHfKfEqMkYZmgxH7ocA1:84h7nK0dbsQVui1JNllOTKIeeHo2rHsD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cee8579c051a3f542ac59e4bcf502e01_JaffaCakes118

Files

cee8579c051a3f542ac59e4bcf502e01_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.bss
Size: - Virtual size: 360KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 304KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ