2f4208ac6f6fa50a68217d2a32ed01b0_JaffaCakes118 | Triage

Sharing

General

Target

2f4208ac6f6fa50a68217d2a32ed01b0_JaffaCakes118
Size

829KB
MD5

2f4208ac6f6fa50a68217d2a32ed01b0
SHA1

b6d543624d27c9f49dd9cf8eff32e979703eed22
SHA256

bf10a4127d42e44d433187919c700e43f9d1b9e472d9f8a990c2340236e8bf10
SHA512

bd45e1ebdfd939bcf680ddd22cb5057e6b4a50c1ba01a7a816d7154b65dbe882b75f531b55a73fcd54a85412ce5da01219047ef8610149e2f39f0c955d10478d
SSDEEP

12288:8BJ6C45n/r8iHfT+AC62T83cBhG3KP9EpmZj075cNdnMSal1BMzTarSq9QjD/ll:k9OQ7AC1830dlF276Xla02rlIl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f4208ac6f6fa50a68217d2a32ed01b0_JaffaCakes118

Files

2f4208ac6f6fa50a68217d2a32ed01b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 458KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ