2c76e3168d28a2dcdd7cf9a4dbb5e9c1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c76e3168d28a2dcdd7cf9a4dbb5e9c1_JaffaCakes118
Size

465KB
MD5

2c76e3168d28a2dcdd7cf9a4dbb5e9c1
SHA1

7add85cab7795a9ab95a3c7b9528a8d84877cf71
SHA256

49560ebd9013fc10d749979bd5ecae279a1b930b8533eb1a011f053ecf70a5e5
SHA512

da986b6eac6e7ef1a1668b991f6843c7730f8c41b3fa0df4ee20458de81e20e984cf3f411b87727e3f342fd9651fff709e681ec27f9b98816355c11f3054a32a
SSDEEP

12288:aExJSXkLkzxq6ul43ate0++6wAF7EJOMTN:tcULsFuBe0MwAF7+O2N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c76e3168d28a2dcdd7cf9a4dbb5e9c1_JaffaCakes118

Files

2c76e3168d28a2dcdd7cf9a4dbb5e9c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 4KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 800.0MB

.vuigmu
Size: 454KB - Virtual size: 456KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 596B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ