e22d1bcb7c73c1aecbdab8a8aac06a50_JaffaCakes118 | Triage

Sharing

General

Target

e22d1bcb7c73c1aecbdab8a8aac06a50_JaffaCakes118
Size

715KB
MD5

e22d1bcb7c73c1aecbdab8a8aac06a50
SHA1

cae0229b49cd074948130ddedc85117b3ea800fd
SHA256

13d5f07758f19d0ccdf3a49d69c1e60c7c6207deeb09ae00e28cd7686787211e
SHA512

da54a2ac40796bddb8ca084a604b8f9debf62348c50738d86e3cde388275c3f518363bdc0a84df45b1f6304124712736b14447c85b013ae6d13969a9c3dd15f2
SSDEEP

12288:RkmAqNhBrYvg6QiEDCyxDdy0CBRXjIjbUS9R+jD5:RN5Bv6QiEjJy0cRLuR+R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e22d1bcb7c73c1aecbdab8a8aac06a50_JaffaCakes118

Files

e22d1bcb7c73c1aecbdab8a8aac06a50_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 318KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ