2804493f6c012687fc9cf2da8353602a_JaffaCakes118 | Triage

Sharing

General

Target

2804493f6c012687fc9cf2da8353602a_JaffaCakes118
Size

2.5MB
MD5

2804493f6c012687fc9cf2da8353602a
SHA1

914c7052dfe2c4f1e8e5b65d04691df305d95213
SHA256

d3d337c3ddd78a317616ec1939191cc2e97abf0bf31fe80175e3fdb2db616cfd
SHA512

e022d0d7835ae5451673806d723d538e8169765f28709c35ea447633bd4f43813d6e4c565b2c0e793d2e15c419052a1da93c7f38e37accf6451067ddcab01d06
SSDEEP

49152:v2qT/j0AG7BmgYBf/ZkYDXAOcL75OSVNUglvdF7Yz1FVVSo7PH/IPiaV:uKj0JVm/peYDXAOc5fnlF9YJJPfIz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2804493f6c012687fc9cf2da8353602a_JaffaCakes118

Files

2804493f6c012687fc9cf2da8353602a_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ