2fe5a61a2c449b096aba83214cf062e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fe5a61a2c449b096aba83214cf062e0_JaffaCakes118
Size

128KB
MD5

2fe5a61a2c449b096aba83214cf062e0
SHA1

aaab60ede4d96acf26f997561c7fd8ace73e2058
SHA256

f7ec461888f4b0f61877beab2d1543a692030b94f885558415dfb89cb0577155
SHA512

2cb21726515394991ca61f33444f73da10ab5bfa721b16fd7ea2ced5503f5ef362dfdbfdfa70d949a8c1aef2a745d247ed504f8a566a0dc50c8d5f6a87cf37e1
SSDEEP

1536:tUbmM6DB15NMKNiY8NkwVkomzLEiaTNXyIlYTbBtzuMJH09jw9cC/w9LWeRyRDc9:ayM6DT5FYkomzL6ly9BlAmW4UbUI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fe5a61a2c449b096aba83214cf062e0_JaffaCakes118

Files

2fe5a61a2c449b096aba83214cf062e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Documents and Settings\pc2\Local Settings\Application Data\Temporary Projects\svchost\obj\Debug\svchost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 163B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ