2ff79648e4a6c84947c4c4380e2143b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ff79648e4a6c84947c4c4380e2143b6_JaffaCakes118
Size

104KB
MD5

2ff79648e4a6c84947c4c4380e2143b6
SHA1

684ed30350af3c0368d0edacac6b25a5b9b32742
SHA256

2f1cf348c97d1e6e8a585f8d30dd109d6d2204869553434cb5b3ac3256f032f8
SHA512

988fa6a45c4b1c5741d301d65e38e179406dc025d6751bacdcb1ea3028df28640f00b987a074d215c986fea3186e42c1e909b91f45ef54f3a4b18bded3c13540
SSDEEP

1536:2t/UJNoLHLoOTcQpjTGZTg57qCe9oodOOHvr42aeEKIg4:OYC/oQp/GZ87GyodDHvr428Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ff79648e4a6c84947c4c4380e2143b6_JaffaCakes118

Files

2ff79648e4a6c84947c4c4380e2143b6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b650d69ba2eb49af97c57821cf08461b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA

user32

LoadIconA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DITAA
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ