2ebc1c31b138441f53cbf837f4bcd00a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ebc1c31b138441f53cbf837f4bcd00a_JaffaCakes118
Size

260KB
MD5

2ebc1c31b138441f53cbf837f4bcd00a
SHA1

537cb08b96510974c4b9302b71d45989e55fd3d6
SHA256

9d1c5ca11b7d459c882325acc3603d011469d0291988363d4f8d1fa11ab3ad1b
SHA512

a24dfe74f0b479c097016ba066c297594ac0fe4a6296aee250e337b25b15e2b929f1b9142e45872167f0907cf28ff74e30923fac82c82f35b93f415e6cd324a1
SSDEEP

6144:anxIZhKp10FpAwkREgh03o/gx/ofBIDYM+SR:axIZhKp1ApAwkRED3KSguDYHSR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ebc1c31b138441f53cbf837f4bcd00a_JaffaCakes118

Files

2ebc1c31b138441f53cbf837f4bcd00a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

ose.pdb

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vsp
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE