2c2a8b7c01474878f3ef164c14e8df20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c2a8b7c01474878f3ef164c14e8df20_JaffaCakes118
Size

86KB
MD5

2c2a8b7c01474878f3ef164c14e8df20
SHA1

93a0cad6bdf5727feddbc5af36014aa9da662294
SHA256

c4ca95d9e6f8f74952fd4ed9176bd9b2f5caec2b76275da40fcfd989975ffbe0
SHA512

ebb7edc5f7a87440eb69c0e1114c4cf755196346637e4780b23cdd9fee27021c1476d92b8c1de0eee602c231ba1d743e273c2d906a71bc83c5b8ddb9540a79a4
SSDEEP

1536:IDXdfwSGUkKFgeCRoVKsMj2VhMwXDFpGk6jXLmV/zcs2ze5EkmjYCa0:IDXdfwStVNM4MwTFpG5q1hQCmjYCB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c2a8b7c01474878f3ef164c14e8df20_JaffaCakes118

Files

2c2a8b7c01474878f3ef164c14e8df20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ximera
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE