2f2c8a3d6cad60a5c90c5ded0400f846_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f2c8a3d6cad60a5c90c5ded0400f846_JaffaCakes118
Size

12.6MB
MD5

2f2c8a3d6cad60a5c90c5ded0400f846
SHA1

e8c59d8f9a63e0df162202ac46aac89904300e37
SHA256

15a06e4108f461fa5d67e06e9ad303407167cf73ee08c03bf773fd3d481852c2
SHA512

03021c0e5bc050829e7ac3186c06ccf5c4c5e78aa6639863a45751acfb614711bf331c6f4d09bf4869969c2fae5dc9d3e9d903f0d718ba12e4be913725102b1d
SSDEEP

393216:LSyGCRIHQ2//vvzZ4nFNL3eP7RM+IN54Tpmnkp5K:WyGDHQ4ZSFp3e7Ir4T/K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f2c8a3d6cad60a5c90c5ded0400f846_JaffaCakes118

Files

2f2c8a3d6cad60a5c90c5ded0400f846_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

sfxcab.pdb

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12.4MB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qnk
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE