2b6c01634af8a1bb1ca816db47209cf0_JaffaCakes118 | Triage

Sharing

General

Target

2b6c01634af8a1bb1ca816db47209cf0_JaffaCakes118
Size

268KB
MD5

2b6c01634af8a1bb1ca816db47209cf0
SHA1

50383b8d4afd97ccd01a0439e04f6493d68ecb32
SHA256

e22f8e75e206ab8ea05a6662f807d770f6ab12440085a7624d084d0713e9f0c0
SHA512

f99589cc3407c2890de5f78836daeb6bd09ba3833d1c315b2359e953689f47a17e2cf5bdf4c63f5a30e8b89963f41e92520712299f8f77fb097df7efb0033fd6
SSDEEP

3072:Ka3T5HQvP+ez0ltPVGpOEenj6JQG0veLNJ2ycPAwBLNPjLdEJsw+0p5scyF/q1RL:33T5QvGhtTEA/GZXf+VthuCMDHK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b6c01634af8a1bb1ca816db47209cf0_JaffaCakes118

Files

2b6c01634af8a1bb1ca816db47209cf0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ