2d7954e64f2634751f45f39b583f77a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d7954e64f2634751f45f39b583f77a9_JaffaCakes118
Size

1.1MB
MD5

2d7954e64f2634751f45f39b583f77a9
SHA1

0eff7b47265eaa009d3e20f297b55f95f502eea5
SHA256

46f13c6bce6b220d918f0fc76b57ddd402bc5a499a231b5c3681d93ddb4f1180
SHA512

0268a36735abf065549e5f148da212ed530dd3395bb352fa6c245f60ddc330b9157efd84d0df9dda04c8bbb7d34ca7fe35903bf2a7c9257d7d00a13a2d538be0
SSDEEP

24576:lJtUFM89d1BpSMrwNtBnbqdtU5v4+0uI0H0A6ZnAfnJ:tUF9BpJAKqg6EAfnJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d7954e64f2634751f45f39b583f77a9_JaffaCakes118

Files

2d7954e64f2634751f45f39b583f77a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM

Sections

CODE
Size: 418KB - Virtual size: 575KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 636KB - Virtual size: 640KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE