JaffaCakes118_e2b4b6f6cb4791eb4eb3eb6f77d589e6 | Triage

Sharing

General

Target

JaffaCakes118_e2b4b6f6cb4791eb4eb3eb6f77d589e6
Size

1.9MB
MD5

e2b4b6f6cb4791eb4eb3eb6f77d589e6
SHA1

43ca94fbccc8830e73cfe3c82697d721ee9fa0e3
SHA256

7f88faee99e6aef40d2ee901ba13671682e2047d7739a6a4e0f7031f5e71997f
SHA512

aeffeca3b91ee3e7ac46bca0fafb62ff76b124e3af684914f1c6c2e57ddc3b3a63f704c8a743f5ca0beddb7816fdbbbfcd8dadc565fd5ad8c776f7f9b205353b
SSDEEP

24576:R5tc27IjufaOrlKAbsGBxAlfygpagQdUlHVMFPK06P8+5VgGgvk9/5VwV7qsA:9c3sb/xAFygATU8FPWP8+5VCvk9I5E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_e2b4b6f6cb4791eb4eb3eb6f77d589e6

Files

JaffaCakes118_e2b4b6f6cb4791eb4eb3eb6f77d589e6
.exe windows:5 windows x86 arch:x86

9447b90e414ecbcfaf91bba2abf744b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32 rasapi32

RectVisible 0C0

Sections

.text
Size: 1.0MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 780KB - Virtual size: 780KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ