2884e9fb676a52fd894f172be9e3c7f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2884e9fb676a52fd894f172be9e3c7f6_JaffaCakes118
Size

723KB
MD5

2884e9fb676a52fd894f172be9e3c7f6
SHA1

769f1576f36a49b8c2d727cdd16ff5783eb1b7de
SHA256

731779d2107bd2f27cc06e02951c4a252d8bfaa4d8ac34382101c42c53f162b0
SHA512

6d7ae9f531975d80c25b1a8966dd923b40e5ba7490f04c7a5af5a247a8f0eb2e2b3e3b9aa2281a233bec0056a84ea85fa14b8a271e2edeed2bd41404b7fa7d82
SSDEEP

12288:HEDCJJDXb8qWvvMyesvleMkWzChpBTfgYvVtcgwSuLnKteut:HmQGbvNvjkJPKuMlXUt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2884e9fb676a52fd894f172be9e3c7f6_JaffaCakes118

Files

2884e9fb676a52fd894f172be9e3c7f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 587KB - Virtual size: 587KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ