2cddde1850f99cb5a4b004b882752fb9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cddde1850f99cb5a4b004b882752fb9_JaffaCakes118
Size

13KB
MD5

2cddde1850f99cb5a4b004b882752fb9
SHA1

aa7f50e9f285160b6cc32a17f948600bf76b9a47
SHA256

148fe427897e90705dc6e8cf5448aaac3c083e4dc422001b79b604abb3b50071
SHA512

2deb3b3a5a1e2bee484d0d0ccf5fe36617e0f9d34496d52b9d88cdb96906d07f267984a171ac4c1a49f81b5b4ceef63c99fd92636a4f8110aba0359a1344d585
SSDEEP

192:otn28nFjwF23YcrxuDifXPM8EaKg81skoHjajZAkeJcfS0AsNoE3kLVhe9sa48:ot2u1wUf1Tq1s0DfS0AsNF0La

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cddde1850f99cb5a4b004b882752fb9_JaffaCakes118

Files

2cddde1850f99cb5a4b004b882752fb9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 662KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.6MB - Virtual size: 19.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ