2f8ec805ac5c262e0947fd994198354b_JaffaCakes118 | Triage

Sharing

General

Target

2f8ec805ac5c262e0947fd994198354b_JaffaCakes118
Size

384KB
MD5

2f8ec805ac5c262e0947fd994198354b
SHA1

6100db8c67e286a83880b6698a21c7031a45dfa7
SHA256

c5ec7cca3341063f4316fde02db0606818edc03d7cc2381ff6ddd634fe575a96
SHA512

73e67a4d227cdb106e2f26c1503d87949fbaed74182f25b1b918cef5526f094edc38750e30a401559a290e20f0fb581ce0f5d305bc525d58756f2a84efbe783f
SSDEEP

6144:l5wr5S1XhvJBfOuR6CeuscWzMLksBnTnAzJLQeewQee2QeesQeey4QeefQeehm9p:l5wr8VhLft6uscWzGBbA1+xXJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f8ec805ac5c262e0947fd994198354b_JaffaCakes118

Files

2f8ec805ac5c262e0947fd994198354b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 268KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

GARR
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE