2bd20bcb9b4f15a59f61d83bd112a155_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bd20bcb9b4f15a59f61d83bd112a155_JaffaCakes118
Size

927KB
MD5

2bd20bcb9b4f15a59f61d83bd112a155
SHA1

1df3e2c24447ed02274ecd7ec5e972aacacd84bc
SHA256

c953e062ff605c4304689cf98cf95ce1c7836b467d2f3d8a7628e70e62d02448
SHA512

1b89eb3760f406005b21506f7ba8e1471b601ffc2d401b892ca9c504df78b05dab10fb58b1ce7e5e58a39aa9402641b6d7246991b6e56cc5d12b98d4578b14ff
SSDEEP

12288:fU+ftts1PM7WUgt6/2KS3IINpjcM5f/gW6r0bqbAL7aFYiBSrkq7gG:XM17b6/ETNFV9/74w7ami12t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bd20bcb9b4f15a59f61d83bd112a155_JaffaCakes118

Files

2bd20bcb9b4f15a59f61d83bd112a155_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 782KB - Virtual size: 782KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ