2c3853d87bf6217f6fc42e1f85ca3adf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c3853d87bf6217f6fc42e1f85ca3adf_JaffaCakes118
Size

2.2MB
MD5

2c3853d87bf6217f6fc42e1f85ca3adf
SHA1

945eac5c1c3b084ec85c0b1d69f548f58d21025f
SHA256

a17f4de8695e00c322dafd5f6437711d0f32b676c537bad924038f8761269dbf
SHA512

7ffdf1bead970b244fc1bd3240acb0419f277f9a408da0d449e86527193706834adfcaa308b8994f2ff768596dbb259955790ce16adcb6993aeb1a5f25e9058d
SSDEEP

49152:SlneEtM89Ec652i+cfwWhR7tysXypXCdYEr1ViR6ebA5rOYiZnb:4t1EB5rwWfDySdYEr1Vo6ebSivZnb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c3853d87bf6217f6fc42e1f85ca3adf_JaffaCakes118

Files

2c3853d87bf6217f6fc42e1f85ca3adf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ