e07dd0768d78cfa9efd237289b84fcb7_JaffaCakes118 | Triage

Sharing

General

Target

e07dd0768d78cfa9efd237289b84fcb7_JaffaCakes118
Size

436KB
MD5

e07dd0768d78cfa9efd237289b84fcb7
SHA1

ffbbd7a994fd41ce4dd1ccab554ba49f0fbb0cc7
SHA256

38631c5ef83de1918bc6a56b3291613c1ac8163214b7a886694e7b82c19f4c51
SHA512

f04769d3c86c537a678fb6a22dff98c3118094afcfcf925f0fe82923df65bbe50dc43d67c46d4090808c141489c134a9bc8ba9ed6187fc12dee709d92f21c92d
SSDEEP

12288:a0RkwMn9RNwziwWagUDVyjKFP0KCR+buY:EwMnN4iwUWMSft

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e07dd0768d78cfa9efd237289b84fcb7_JaffaCakes118

Files

e07dd0768d78cfa9efd237289b84fcb7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

setup.pdb

Sections

.text
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.uro
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE