2a6ecfd54498e691b8c70c7e96ab90b9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a6ecfd54498e691b8c70c7e96ab90b9_JaffaCakes118
Size

57KB
MD5

2a6ecfd54498e691b8c70c7e96ab90b9
SHA1

f5218c3d0cd57c948bd490ff5e1ed1de548ceb53
SHA256

2f0a3ad9dd6e206317244a54c1ec1a7b421b82fce209652026e12adf1057af66
SHA512

3208c3134cfe52248735db0c81af6f830aa0a64f2b01054016adf27b9c726198ffb74f873d0cd9993aec037ffe0b7e75d394d852d588b042261d30c8578ebae3
SSDEEP

1536:d0YAeeRLIaLJj39Fc26fvAP1/tRCfhdMzgdab:iYAekfF6fvQCfhuzgdab

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a6ecfd54498e691b8c70c7e96ab90b9_JaffaCakes118

Files

2a6ecfd54498e691b8c70c7e96ab90b9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 688KB - Virtual size: 688KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ