00c2b3ddf85854e14ea18da3e03649e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00c2b3ddf85854e14ea18da3e03649e7_JaffaCakes118
Size

96KB
MD5

00c2b3ddf85854e14ea18da3e03649e7
SHA1

ad528fc75fe83a50b2504ad7fed4c2c4ca32cf5a
SHA256

7d8a86996cb816dd580ac7a7b94e8d7bbc8cee59c2478062daf4cbb2a72aed78
SHA512

c8c53fc299e9a3f6f2204a01b73c56e4a302b85db6107ad6f9d521da0d41dfc57d6ed609ba50b7d4e35fda6ad0950bc11732a06e4530b7ecf080fad86760a9d0
SSDEEP

768:2U4A6LvqzLA2efe1K/bAo8JNNhqTPjSzvXDcRgPvYxJuHM9FlGUOoRL:2RA6L0nK/bR8LNhuS1YJus9XG2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00c2b3ddf85854e14ea18da3e03649e7_JaffaCakes118

Files

00c2b3ddf85854e14ea18da3e03649e7_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

__GetExceptDLLinfo

Sections

CODE
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.HDATA
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE