2b96e69b8fb541245677c4770e054c15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b96e69b8fb541245677c4770e054c15_JaffaCakes118
Size

1.4MB
MD5

2b96e69b8fb541245677c4770e054c15
SHA1

0f6425746fbf55d918d12cf6932ee2cd1df7ed97
SHA256

c98a2a42aa2e1adcd1f41edb341289791460ea149a9c6642980081c86374960d
SHA512

e3bda61eb6a2463a1c60599d74243a41e60a94b57f944175c4506f718b14a3948843509d731b32ed71571ae84d5851d5000000378107831bde31e20e329c59c0
SSDEEP

24576:X1cz8ZQz2b8bmKnL6yTc9LPgjhzmrO8VPZT7nnEp222222222222222222222223:SH2Ib/2yA9LPgtqiUJnnEp222222222f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b96e69b8fb541245677c4770e054c15_JaffaCakes118

Files

2b96e69b8fb541245677c4770e054c15_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 540KB - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 756KB - Virtual size: 756KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ