ef47a7ff28060884dc50a27a0c2f9681_JaffaCakes118 | Triage

Sharing

General

Target

ef47a7ff28060884dc50a27a0c2f9681_JaffaCakes118
Size

236KB
MD5

ef47a7ff28060884dc50a27a0c2f9681
SHA1

81fa8ad33ec7458f98b1b51169c8c32fb5830adb
SHA256

fc1cbdd119fd9a0bbc1a7fc67f100944daf94d0427ec72850062686539b50be5
SHA512

228b32e74e0e22eab9e3c3f74ac92882f7a142f1a8c8eeba32bfd392c46c9f8924e924293f00b405b3fc0a5d21a40e3f31e7a30e4dfc72eda3185d0850946df0
SSDEEP

6144:ofX2GxdVdKSBCtpeddcjeuKs98dHJhJ8S4FYiFJCRfS6izQG2+kJWXOdKK:8X2obByRQssJ8HFYKANVx+kJnKK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef47a7ff28060884dc50a27a0c2f9681_JaffaCakes118

Files

ef47a7ff28060884dc50a27a0c2f9681_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

cleanmgr.pdb

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zwt
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE