2c25a863f437f302b85f695b43799b18_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c25a863f437f302b85f695b43799b18_JaffaCakes118
Size

2.9MB
MD5

2c25a863f437f302b85f695b43799b18
SHA1

b2776c5d86f26d1d11b8abf5b2f88b5296688e51
SHA256

5ac7cebc853b16d2a1b8c20fda57d6449f015294b1b4df226aea694fadf78928
SHA512

370147b557df7badaac836f50e8a430a1a14a843f76783ad9124162ed38d66dd7512b1fa717f082de493adf87a1507369f5380fb3b93977d518143d5feacc8ac
SSDEEP

24576:OPSS1Y6WUSYeM13g99EzY0suV8bWFI9VLpbAs76hVzlGAVqAKGrreKelMjuKYqUC:zaYO1BZk4jI9Npf76fzl9sQGKaUTyxD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c25a863f437f302b85f695b43799b18_JaffaCakes118

Files

2c25a863f437f302b85f695b43799b18_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_iutr
Size: 501KB - Virtual size: 508KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE