2b8b63c16ac890c83528e5e3c7b4ca99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b8b63c16ac890c83528e5e3c7b4ca99_JaffaCakes118
Size

8.4MB
MD5

2b8b63c16ac890c83528e5e3c7b4ca99
SHA1

e154d0088158a0923ff84a4127f78259a8f16111
SHA256

0e314738c7ea9e555a8afa48a90f1918f994aba174082f463d4c829fda26656d
SHA512

a6a5cc9bf10613b9161b72440040899cced5d3c29823287f51b40526b8ba2bb9fe40e5e5b1be56b7ea835c679f32e739d3c77e753773b5e5235f5cad1445db4f
SSDEEP

196608:M1MScVkThqIr8cVDJ2LeR9GNDsCB4XvzpOFig0YZY3rgV+++++++dMFn:M1MHkTEIFDJr9qmXvFzg0lgV+++++++E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b8b63c16ac890c83528e5e3c7b4ca99_JaffaCakes118

Files

2b8b63c16ac890c83528e5e3c7b4ca99_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 443KB - Virtual size: 443KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7.9MB - Virtual size: 7.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ