2d3f9abf4943575bc2d6c2dee766db90_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d3f9abf4943575bc2d6c2dee766db90_JaffaCakes118
Size

2.2MB
MD5

2d3f9abf4943575bc2d6c2dee766db90
SHA1

946c7553dd8d0434023fe2cda4a2053b55dbb747
SHA256

d4fcf0af059d97104275ded5c22da23e5a24ad23a14cf825cad7811af53ff941
SHA512

8403ddf16d1061925361c76b45a7ba4804420ff6dbb1a1fc90106da32b04aa9564b88026b840f16cf2702cccbe41bad44d41149cbc42b7bc658390aa4769200d
SSDEEP

49152:eQvCd7ssWKqjjroPmVPRxXdZyOq9mBYlZQSY8gsSsYdR:RvCd7LNqjjVJlLyz9mjSY8gs/YP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d3f9abf4943575bc2d6c2dee766db90_JaffaCakes118

Files

2d3f9abf4943575bc2d6c2dee766db90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wade
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE