2ba24955032a284928e6f6c4a5a5495a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ba24955032a284928e6f6c4a5a5495a_JaffaCakes118
Size

94KB
MD5

2ba24955032a284928e6f6c4a5a5495a
SHA1

5e1b634bb64e903fd38b8039889402e6d5e4ccb4
SHA256

bbe36f556f60825469a7865f6744a5b8610cf39cd78dd60d1a0af98d5c3d804a
SHA512

bbfa399998ae0f50e0177b027c1f25ed684cd6b5a96210630935da507ff423b9592f828c03a376841b6f1a239da39d206fe785b0a3a2bb04fefcad924a31f8b8
SSDEEP

1536:oOCcE76hmvZ0Cw8k1Ekd8Kbw/SLDv+wM/koZg6lX7ODvbI0FQ+OBFIy:oOCce8b89kr1/+wM/K6x8kRnBFIy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ba24955032a284928e6f6c4a5a5495a_JaffaCakes118

Files

2ba24955032a284928e6f6c4a5a5495a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ