2f6006d4d3d2230afd0f61671b8344ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f6006d4d3d2230afd0f61671b8344ad_JaffaCakes118
Size

1023KB
MD5

2f6006d4d3d2230afd0f61671b8344ad
SHA1

b23ddbcc6f80dcf3ece7b5134088b9431e62eb10
SHA256

24538c81e7bdbcc20a49ca7040fd115db28f238c51611faded59b268fd194e50
SHA512

c397d412a65891805e6e7152484ab7f301cd32cca161f269ba046c612e5629b9969ca5942996cc7d7772d301f3134dceb4ef3e1634990008a3eddbc75cc3a056
SSDEEP

12288:/QOXUABpID+grqqBAvMkmE56s9bCw+lIDJUvrUGmY9AaRdzUY6kac:zkQID+g3BAvpmwVCYVU2QGkac

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f6006d4d3d2230afd0f61671b8344ad_JaffaCakes118

Files

2f6006d4d3d2230afd0f61671b8344ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 575KB - Virtual size: 574KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 387KB - Virtual size: 387KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ