f484c6a0423e12fe0c74ada340e13c87_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f484c6a0423e12fe0c74ada340e13c87_JaffaCakes118
Size

211KB
MD5

f484c6a0423e12fe0c74ada340e13c87
SHA1

e54538687673b795d7f3fba2938ca6957692d47a
SHA256

53e81d21265370367690acfe6cdc0f6146b0dec4d681dad8b06f1e4aa4f85b95
SHA512

c535f08ab93afb7de233b3b2a436c74e65ff979db284c0f35e63e3f4274c1a6a58f0ccf315210393f0da28b0a599a913f508f997547e2bae3f25fcb4b58f9be6
SSDEEP

6144:STA2/U0gS1h+c0FeCjpxfv+HQF0xfeZtrSE:Sk8fZS/FeC1x255YtrSE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2w3e3e3.exe

Files

f484c6a0423e12fe0c74ada340e13c87_JaffaCakes118
.cab
2w3e3e3.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 431KB - Virtual size: 430KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ