2e8a39d631eae7b0417544f33a8d612c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e8a39d631eae7b0417544f33a8d612c_JaffaCakes118
Size

644KB
MD5

2e8a39d631eae7b0417544f33a8d612c
SHA1

ca3f9243eda3f440d89b6df0db152a06b8966bdd
SHA256

643f0ec9ab93b22edc1de8d5637f8d34d3832926e1bd570a881ab0da423a2a54
SHA512

f0869ce28f0c415a8d3cb3cbde2f26984bfbc54a4727f4973abb48dadf88c592c94cee90dfa7d206a3bf3f8d899b453c32ce9d754fa85f8f437c565940dc0c5e
SSDEEP

12288:UZ31Ssexh1/beUc94CZlY/EV+SDQb4PF2JJItdwCqSHiHQpZPt3OxN6Eo:UZo9xh1/KUc94UY/E/uHItdq84YPtqNc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e8a39d631eae7b0417544f33a8d612c_JaffaCakes118

Files

2e8a39d631eae7b0417544f33a8d612c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1234567
Size: 590KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE