2c1764df140adf3a174774853ecc6fa2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c1764df140adf3a174774853ecc6fa2_JaffaCakes118
Size

328KB
MD5

2c1764df140adf3a174774853ecc6fa2
SHA1

5d25bb3c2ffa15b04d5ec70cd5e09ccd42d70b28
SHA256

db3bf8a9d6290e5d53df39152d8001febf4ee1189419447486ab49045b3f2375
SHA512

4aa4c3afbafe74f3730ee89a725e2e0e32c28379b1ba34699ebc5424e314230eba63ece270f9d0e7c4d58344650f4df67d38878e20c7f32fe237912f13c7f365
SSDEEP

6144:sRjUcK5+gfpUOi0LTTwo/JskNAVNJN584eeDE4ootX:sRYc4+gun0UIykqVNJN24e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c1764df140adf3a174774853ecc6fa2_JaffaCakes118

Files

2c1764df140adf3a174774853ecc6fa2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 323KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ