2d000cb761ce7e4bc009f4c5107f6a6e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d000cb761ce7e4bc009f4c5107f6a6e_JaffaCakes118
Size

233KB
MD5

2d000cb761ce7e4bc009f4c5107f6a6e
SHA1

641bfce221064f60c7e572000c1a85ccc63e1f2b
SHA256

3e50958e0424b97c18ab3f4a08fa81331a8682209de4c2b54e4e35d103ee49c5
SHA512

6f97922052f6178304f1ceb7905d33f1696f85f7c50e1a357204b6dd0c450a0b6295189d566221d7f8c705eed03b4256b6351191d7dc8f6339806ca333abaec9
SSDEEP

3072:ZGZqgTdOB4y958qsymCcj9lbBtkL0dKqrnlXu1s0zFU5/1DsZfDkBHPHPluo9OuU:ZGdOBZqfbkLGKk30w/8f4ev

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d000cb761ce7e4bc009f4c5107f6a6e_JaffaCakes118

Files

2d000cb761ce7e4bc009f4c5107f6a6e_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wlcstart.pdb

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.wtq
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE