2e0c6f8cdcc68903d842b97e61f10aee_JaffaCakes118 | Triage

Sharing

General

Target

2e0c6f8cdcc68903d842b97e61f10aee_JaffaCakes118
Size

1.8MB
MD5

2e0c6f8cdcc68903d842b97e61f10aee
SHA1

16002a983eee55d59d0d7403fa1ead0d2f9edbef
SHA256

cf67b364717f108c084ce8140d00d0107deb384e3c9a699ff9b8bc24b69ab744
SHA512

0b3fa8b52e82cc6fad03f7dea60061f76540aec1d755f82eeb6d02ff87631583aeead2d92a1545e5a1053d6ac5b31235da1ebe0d9d7e708a0ce31fbaf0a6b116
SSDEEP

49152:60kcK1H6umtOryVBNlxog68mFM1gcfPe9:6796vtOryVB3M8mOdnA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e0c6f8cdcc68903d842b97e61f10aee_JaffaCakes118

Files

2e0c6f8cdcc68903d842b97e61f10aee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ