2fbe0855062d8d91e50069066def8669_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fbe0855062d8d91e50069066def8669_JaffaCakes118
Size

503KB
MD5

2fbe0855062d8d91e50069066def8669
SHA1

40300ec8ab051b926182182f4f68d0f325f2997a
SHA256

1dd4556baeaac9dfacecd5184805d24068604349bfdf3b1f015828244663992d
SHA512

47ecfa698c51c9d7f159f9bdb71b13e5c74975706f7dbdbd6d2b45f7f829849ffd94a5c2ae6fba1beea9218b2aa0d0f5c48864f37704607e1d45c1354768262e
SSDEEP

12288:U5uV9JoPGu8D0QuMimhM2ckhvWUrJXZMz+3F0hls:OuyaD0YbhMidXZu80hls

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fbe0855062d8d91e50069066def8669_JaffaCakes118

Files

2fbe0855062d8d91e50069066def8669_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ