2ef82bdf95b6e934e93299b5ea4897e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ef82bdf95b6e934e93299b5ea4897e3_JaffaCakes118
Size

299KB
MD5

2ef82bdf95b6e934e93299b5ea4897e3
SHA1

2c5090efeec1e190a4d924418e2c7843ed8b10ca
SHA256

d4460f8f4f0c5edeab7e07f0537589c6f0848175f3b591890d7990797a23e0cf
SHA512

eea97b18b37e761da24233a710781b6eb159c086be27500cbcdf5d4f04d5e6b47a6784aadb050207df7b3e72bc6982d9adbb01ad0b08105cabfcd4bf4be5ff7d
SSDEEP

6144:c8K0DctYonlHwBW71zhaizfs9VN6QRfWJE+r7JlV+RJ:kRhpwwNgi076ifWJD1lI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ef82bdf95b6e934e93299b5ea4897e3_JaffaCakes118

Files

2ef82bdf95b6e934e93299b5ea4897e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 246KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE