2641156d99dae4aa8a2e777b30a08c1c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2641156d99dae4aa8a2e777b30a08c1c_JaffaCakes118
Size

129KB
MD5

2641156d99dae4aa8a2e777b30a08c1c
SHA1

ecc08c7291f1725f84678463c7c06bd41048f8be
SHA256

a2f1594f01e87b83978341d60ddfbec3475a3a92f4b2e3b92b28c2dadd1ce924
SHA512

0faabd3082df7d7d3ff688c5a7926ba488b2c5e4d06d1b01a1b7ce73c22b53bd133be2599cf3cdc8732f09c17517592f6a6bc1b356b309e28c0564c267d3ca2f
SSDEEP

1536:k+pOClov7L3oJ5SJT0sg6PiEzla1jNdtKN8YfpLC5O0EPNci7:5pOClMzxJ4R641xK6YhKO0ER7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2641156d99dae4aa8a2e777b30a08c1c_JaffaCakes118

Files

2641156d99dae4aa8a2e777b30a08c1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ