2e199fefa11f4416db9b445956eca3ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e199fefa11f4416db9b445956eca3ed_JaffaCakes118
Size

187KB
MD5

2e199fefa11f4416db9b445956eca3ed
SHA1

23e89478b0d85309877256874fc1a370728adf54
SHA256

79a9e03129e77c69b67698fe88228e5c64426bc35b1cadd817980b497d196c03
SHA512

da5939b1c4128580b274c4c2851d17091b20c0c011d4ca156fcf76e08333472a167d6aef7a5d3f5826d5d6b89f8ee40a18ef97476a0912fe1da41c7e5c79b7e3
SSDEEP

3072:BrFvMEGUZ35DSe5GUs4KOTQJ/FtMVKVGxbfT/j/M+G:Nys356TlOTiUo6DXu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e199fefa11f4416db9b445956eca3ed_JaffaCakes118

Files

2e199fefa11f4416db9b445956eca3ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

B.SS
Size: - Virtual size: 285B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 33B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ