2c6289bb379b64ebe1401a24adc3f27f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c6289bb379b64ebe1401a24adc3f27f_JaffaCakes118
Size

190KB
MD5

2c6289bb379b64ebe1401a24adc3f27f
SHA1

adff1759ae2693696d8a58f37d42dad871471340
SHA256

92a6d9ead16e698efe5cdd9b873ea039e0d64b72503edbe2a221376270d71c40
SHA512

5cc1fac04c31d7e4b1c489ea077a0f41739d14990f4b5a7dd37278497f2ff366ff6b9e97c32eccf0f31dd77b0d197f80f5e9398572c21a0aa36811161c5de5b1
SSDEEP

3072:4j2xR4KIBwG4mzk4NGBGc9V687ujvZFJTyY68XhaH3akwuWz+L/slI:46ug2U6FjoY6NKvGLUlI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c6289bb379b64ebe1401a24adc3f27f_JaffaCakes118

Files

2c6289bb379b64ebe1401a24adc3f27f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ