2b4abf6e80586f8f60569b7c59423ba9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b4abf6e80586f8f60569b7c59423ba9_JaffaCakes118
Size

312KB
MD5

2b4abf6e80586f8f60569b7c59423ba9
SHA1

2406897397594062395ae942ac8fe4447a6ad2dc
SHA256

78df44f1bb88806930f12a7119f91873d65bd263d424866928e97306e25fa8ee
SHA512

649a07259859a22f3046706cc7193d37ad01077e7281f2137b9ee541f312768e69cd072129714d68fc170e8ab1a9a7261b4b002427b71b28793bbaf65038623b
SSDEEP

6144:xWI+jNXUeUFTPCRTy7wzFzRODpyUOr2//F2TnLo0DJS:EIQUvPCvxzKy1rc/FsG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b4abf6e80586f8f60569b7c59423ba9_JaffaCakes118

Files

2b4abf6e80586f8f60569b7c59423ba9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 258KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE