2d6ffff7e56a50e0066b74b465ba8809_JaffaCakes118 | Triage

Sharing

General

Target

2d6ffff7e56a50e0066b74b465ba8809_JaffaCakes118
Size

44KB
MD5

2d6ffff7e56a50e0066b74b465ba8809
SHA1

d7a470584bc4d92ac7b84b6395712c3fc543d5e9
SHA256

f045da4ed64f51d57d166e1e3af0c02c946ee8f2887cff953a58b4a1fd3fd9da
SHA512

ae88ef138a700b902b6f035990ddb6f3b769781cf45e509410faf1b7462dda5097408e7814f6421be980666caa746d2f9747f63381c03f12a61d6d088690d08c
SSDEEP

768:UuA0VszZDACRnuJoV7FBKa9Cd/Bn/MTOeinkryq99sa+mxcIPW3a:C0F3mDIa9Cn/d099sa+K1P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d6ffff7e56a50e0066b74b465ba8809_JaffaCakes118

Files

2d6ffff7e56a50e0066b74b465ba8809_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

packerBY
Size: - Virtual size: 107KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bero^fr
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE