2f09d9803bfe24ad28937b7e2c88cbb2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f09d9803bfe24ad28937b7e2c88cbb2_JaffaCakes118
Size

1.5MB
MD5

2f09d9803bfe24ad28937b7e2c88cbb2
SHA1

36a6dd79f390f5aad4629c935ffe0f73cad73231
SHA256

36701eb6273bbccde95c6049390fb7f3fc099317b8ce843396e1a8f44bc34c15
SHA512

500c6b1ba62cb88a7206f921c5135d5f086a7cb391b83a269709ed9b492910ec03b40f42f66b70b18cbf23f6b4dc9d1e2922b7cf2b9aa0dcfb58f0be72f3abad
SSDEEP

12288:lUyAQB1crC7oZMX9wmVxEEFcpQPmwcSD0R/OECSF4PT3qZN7htvQ5EaX90:lU941cmoatXFcpQPmngS4L3opvMNXu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f09d9803bfe24ad28937b7e2c88cbb2_JaffaCakes118

Files

2f09d9803bfe24ad28937b7e2c88cbb2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.58cfvl
Size: 1KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.037805
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.2lhn9$
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 3.0MB

.adata
Size: - Virtual size: 416KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: 823KB - Virtual size: 824KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE