2a098d6470f70a6f6ad48c12be99b596_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a098d6470f70a6f6ad48c12be99b596_JaffaCakes118
Size

576KB
MD5

2a098d6470f70a6f6ad48c12be99b596
SHA1

a51d7051602de8594f2b49f3c32a422185b98e46
SHA256

5997c3a44ea349f967e7a00bf8e01e0e28613a55bae1afb8c5e74e515a9a6ec7
SHA512

50d269807aa3429ee9ee40f2a2c12b46c315f9619dbb580045b4a74c0c5c7fff5647cead27376eb54a1b06ad2ecb9c150de07f76d60e3227dcd162f61efd145d
SSDEEP

12288:yFYUQV+HCzms6fU9PtylluZrQcmOaRGSdLwQp+DyLHNVkkO1+oL5Hnn:GQV+HCWfuPYnuZD8/LHpGyZVRO1+0n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a098d6470f70a6f6ad48c12be99b596_JaffaCakes118

Files

2a098d6470f70a6f6ad48c12be99b596_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 553KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 155B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ