JaffaCakes118_e2888e2133d19db2c7122c4c6ac11aae | Triage

Sharing

General

Target

JaffaCakes118_e2888e2133d19db2c7122c4c6ac11aae
Size

94KB
MD5

e2888e2133d19db2c7122c4c6ac11aae
SHA1

75e5e7dfb4f80a765dc659086fadc04dc2db8ce9
SHA256

2d32b78edfe7dc5e0f4e30aa35a20d9d6189b6e24eb47a61d7590b35492ac24f
SHA512

25a15ae4e8764a02a4dfba4fa90661326922b89b5a2a963f28618bd71dd00266b381b4e8bb6fe44713bcf4d8f63bf82189f80e9d4ede6e0bd0a4a408df02e0dd
SSDEEP

1536:vo5gd4KGonxy1FY4+73s/A42QzSu3BvoAstvqkV2dZVEgmvHN7wGC:v9d4KGUEF8s/A4/F31eqkIdZmtUGC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_e2888e2133d19db2c7122c4c6ac11aae

Files

JaffaCakes118_e2888e2133d19db2c7122c4c6ac11aae
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 455KB - Virtual size: 455KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 586KB - Virtual size: 586KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ