2519ce3006ceedcac42dbe4efac374c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2519ce3006ceedcac42dbe4efac374c2_JaffaCakes118
Size

83KB
MD5

2519ce3006ceedcac42dbe4efac374c2
SHA1

9fa2f893adc4d1bfc5bbcaa18b0a7ce684a58ea3
SHA256

78a1b813d5eadae6c12b74e633382d2960a95543617cefabbd753dfd0ccc6e77
SHA512

20990790ae54141a0e9a0e987c66cf9518e4945d11c113b0ee6f20fd47fe40c1dabb9cb35a68cae8f0772038095fda430d2cf7b08b92971be45c4b1b6d83e42f
SSDEEP

1536:AeAZLLL1GXAQ5kNWjXGXV4bgvGjXAWEoBuSY8fnK:VQBijwxSlvK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2519ce3006ceedcac42dbe4efac374c2_JaffaCakes118

Files

2519ce3006ceedcac42dbe4efac374c2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

?ProcessStatement@@YAXXZ

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ