2760dfd2847f1e7ec439e778ab732687_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2760dfd2847f1e7ec439e778ab732687_JaffaCakes118
Size

36KB
MD5

2760dfd2847f1e7ec439e778ab732687
SHA1

585d31e6a885b8b68887e4f82b2d8449474bc182
SHA256

7ac6d9c60d1b56c58b72ad44ab71a9a95b74d3274065c330908073dfb364ab20
SHA512

ab2636bccd94fbb5dbc830f1f2d01bb2e0696bd92af2dc33465ec08af582438bb8253fcf5b83f63028af45926fb621a17e50e206fd9192eac6060d65dfcb24b5
SSDEEP

768:ly7xskVL+nGO9q+YcqIWPDroe4XR6XNOH:kNPLAq+YcsLroNok

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2760dfd2847f1e7ec439e778ab732687_JaffaCakes118

Files

2760dfd2847f1e7ec439e778ab732687_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\job\gh0st\Release\Loader.pdb

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 612KB - Virtual size: 616KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ