2bc7ce80d490db62edf92f86ab656793_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bc7ce80d490db62edf92f86ab656793_JaffaCakes118
Size

328KB
MD5

2bc7ce80d490db62edf92f86ab656793
SHA1

1b35e714140b35c02d04e35c65448b683b4c517c
SHA256

b9796b09e1bff6400d43ffd3b8df306fcf1d6c177b3e147d225bf457fcd1535c
SHA512

7334cc724b8c95adbeb61a26ec39849386fd56e9554eb282d7befbfab66963c7e792c90611f8fda629de295fbaf2e9ff544d7a7a82bb3aa6e048af12c9f7152e
SSDEEP

6144:Y89XgaCZLIjGojsBOSUfl/WfDAyJLK4/k6rHGVXvLCWGdQ:Y8ZgaCZ+GssWd/NUjrmVL1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bc7ce80d490db62edf92f86ab656793_JaffaCakes118

Files

2bc7ce80d490db62edf92f86ab656793_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 824B - Virtual size: 824B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 684B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 352B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE