2d0dbc1ede2cb1252aa4ff1c33754daa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d0dbc1ede2cb1252aa4ff1c33754daa_JaffaCakes118
Size

604KB
MD5

2d0dbc1ede2cb1252aa4ff1c33754daa
SHA1

713feab6680697e32ee9b405a4167e303a9923b9
SHA256

10fc1d7c6ea1567667d6d6a6c5bee459c3b19c0c59c6e6be2396610e53082318
SHA512

1f2f5d1844652acd39b523af94a7ded1e8163a1565a45f3b753f6f53da3f7afb3f6ffb2455ab6897346a3c7e6ff3c05646d391980b0019adfe818f6df87c1f31
SSDEEP

12288:P0Hkn8BcaayHiI7XHgZQKhJgeCmefHqMdM13Zqb5xV14:Cw8xayHtLHgZpJEh7dGc9xV14

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d0dbc1ede2cb1252aa4ff1c33754daa_JaffaCakes118

Files

2d0dbc1ede2cb1252aa4ff1c33754daa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

t:\offdiag\x86\ship\0\odserv.pdb

Sections

.text
Size: 209KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 196KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.spm
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE