2dc096b854db6ca32969b7a477049f90_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dc096b854db6ca32969b7a477049f90_JaffaCakes118
Size

1.6MB
MD5

2dc096b854db6ca32969b7a477049f90
SHA1

548207d7f6aca4f8e41348a78bc04e42683d7bd3
SHA256

2bde9358371d467ef43bebfc0d9db0aeb507d1c78ec3fbd61b4b797aab36fe20
SHA512

d3c58207c1875f52105450fa82e66ca98570e6c38c7e069aa91dbdde8a58d71eb9dbd6a5b3ee0e8351f36a8d5a2ff98355049a6fe144cc5531d34b02f4638fa3
SSDEEP

49152:KE82tKn2akOhMofnj6EmtsgQXQ8FDk9Zy:g92axfnj6LFQA8FDk9Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dc096b854db6ca32969b7a477049f90_JaffaCakes118

Files

2dc096b854db6ca32969b7a477049f90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 19KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lolorma
Size: 1.6MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE