2f2658076fe0ada23f08a2bf6437c7e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f2658076fe0ada23f08a2bf6437c7e6_JaffaCakes118
Size

495KB
MD5

2f2658076fe0ada23f08a2bf6437c7e6
SHA1

460c37054f55056feb204644fbcf63cd03097b21
SHA256

3e98cf9992c8fb8d315e855c0a6960872e34064ebd3f401bc80a78b4205b14a2
SHA512

a47dc9975de1779ad925e4e4c9cd1feef805a175fa6528ecae2154d4ae8598b41bb085f27577eaca0e164ed6e3b2fad1f69284ce0f87802cabb29c857b74ee38
SSDEEP

12288:vWSb4QYvZJw0B1yb6vBylNpiNGdwBQ34EzxLYbhay:vB9qNybptsA44xLYday

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f2658076fe0ada23f08a2bf6437c7e6_JaffaCakes118

Files

2f2658076fe0ada23f08a2bf6437c7e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 308KB - Virtual size: 307KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ