2cf789252c5e48486925f06c063e3a9e_JaffaCakes118 | Triage

Sharing

General

Target

2cf789252c5e48486925f06c063e3a9e_JaffaCakes118
Size

228KB
MD5

2cf789252c5e48486925f06c063e3a9e
SHA1

b9e7497be56141f6b0ff7a5deac56da12d7c6453
SHA256

863db016ddcd5e12ebd04300df72bc301c24dd69cf86c0a0a0eb35f2b810070a
SHA512

e27a36fcb8acbb31a904cb6405df80567147139b89b4850f4a6fd9c8ff69782bd0238ba664848f108325b39ee6eea8bfd151e23e4f76dfaf3c77d9531c1f80e8
SSDEEP

6144:mbb0pPGqdhsWTl3WYdYB+TZQVjK+qAdjX68pkG0:mbocGi5BeZQVjK+qW6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cf789252c5e48486925f06c063e3a9e_JaffaCakes118

Files

2cf789252c5e48486925f06c063e3a9e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 223KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ