2981e80d0956f055696d96cbd111bf0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2981e80d0956f055696d96cbd111bf0b_JaffaCakes118
Size

1.5MB
MD5

2981e80d0956f055696d96cbd111bf0b
SHA1

56f4f62fb286125f929b8d5103b45edba11d156b
SHA256

095d1c71aa85e97828b963b12b660bbe09ef32e46409335c71d5fb670adda40f
SHA512

1bfc60de64b3a02319dfb0e3e628ad952596f593cd9b84d8db6a90a30c401711cfeb95a46d7ec536e6452ae4cf6f610796df020c5290be1fd5a30990eda79e61
SSDEEP

24576:iUwclE0Q+9KbflaPOOeT8Wdf6XyJkgCOlBt/R5ptk1aiZ0X0Pj/cPK1PRYpRmN:lG0ZK5h8IfcnIR9k1aq0XmTcPK1W6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2981e80d0956f055696d96cbd111bf0b_JaffaCakes118

Files

2981e80d0956f055696d96cbd111bf0b_JaffaCakes118
.exe windows:0 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

*text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.daa
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 498B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 257B

IMAGE_SCN_MEM_READ

.rloc
Size: 256B - Virtual size: 2KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ