2f69966b04ff969e5531d4f8a9618042_JaffaCakes118 | Triage

Sharing

General

Target

2f69966b04ff969e5531d4f8a9618042_JaffaCakes118
Size

683KB
MD5

2f69966b04ff969e5531d4f8a9618042
SHA1

be83c61443492641a3e0da7ac1d418964ec59d0e
SHA256

077c9e0d2546ae90e83f9b499fcc40e98ee796311bf5186e16dd4605bd0e970a
SHA512

0c4a9b379236737f3d4a3adf2c11b0ae243ad11fafe964dfd1cb8192b6a8177714008765210e1caf5be1c84924a6d52a38174be949f6739f82fc2477bc9beb37
SSDEEP

12288:w9FnzhLKuRZDt8p4i2Cz3ugH6q+G5kREL19DKBoGe50n4T04:UzhLVD6p40zegtt+CjSoGe5e4Td

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f69966b04ff969e5531d4f8a9618042_JaffaCakes118

Files

2f69966b04ff969e5531d4f8a9618042_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 597KB - Virtual size: 597KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ