2f3ae4708a3cd3019c49f84afcdc3dbf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f3ae4708a3cd3019c49f84afcdc3dbf_JaffaCakes118
Size

1.3MB
MD5

2f3ae4708a3cd3019c49f84afcdc3dbf
SHA1

9b8630b945fc6241856bc6d9449e90d1c6424ed9
SHA256

fd949d5b4bb1436c5894520ee176c868addc542248da14a5b6e6ae85559081cf
SHA512

07c4dcf8dd6c71975046265ceef66727a0b601564f2b9a2aa58c8f8558bd2115ca8ef28a0580ad2f1920560d06a47a6c3ff304ae260f06e87686d461863d0cb1
SSDEEP

24576:uFyHFKRPr/KUDDVJhdjBdToE/aZ7FJBtftU:uxTFVnxTDK7vn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f3ae4708a3cd3019c49f84afcdc3dbf_JaffaCakes118

Files

2f3ae4708a3cd3019c49f84afcdc3dbf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ