2ade18011390b14f99aa8054288fa1b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ade18011390b14f99aa8054288fa1b8_JaffaCakes118
Size

4.2MB
MD5

2ade18011390b14f99aa8054288fa1b8
SHA1

161676c9314d5c0f273e1b03e40ef741bb304f95
SHA256

d5eacbed548cbcc822b2cea98f4445a72524e8cb4dd0eae9fa236e092c12516b
SHA512

40c9f2cec01206e8c71d36b203f71a0b74063ece5edd16d8c1f2268b9f9d51ee77edf06fb1fd7011689d0c288f528cec7824a5a387984d143ea547a56e595cf9
SSDEEP

24576:Axk3TXnR5Q7igA/UXCitLzqQPbcjiocMz2UcG3pw3Lhu08q1CnqOJ8I:AQnR5uZXtHXrbuK1CqOJ8I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ade18011390b14f99aa8054288fa1b8_JaffaCakes118

Files

2ade18011390b14f99aa8054288fa1b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 700KB - Virtual size: 698KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 422KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 344KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ