2b1935a1101b57475a451bf50c2f08f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b1935a1101b57475a451bf50c2f08f2_JaffaCakes118
Size

117KB
MD5

2b1935a1101b57475a451bf50c2f08f2
SHA1

0dddc842cf86f2e9bde9d935b47d030c74a3e0dc
SHA256

fc2d3dd37d7e80f7eacbab83cd6554c51ba9904e0cc9383f95db5cada2e78d9b
SHA512

4687a8feed2caa147b2fa89c302ad12c8810f7d83279c9b85d0ae8bed06cd95de752e16ee5592e66f880435127d7589c8374d2a8999f6ae092d5ec6a4d2e54c3
SSDEEP

1536:jl1AvX435VljqdcCL3TZZqRQOqGHHgqmoqe2XIrHfiUrTtTgy1vD8fs6MrYsODcr:wvXxjrjIHoYTf5f1IsrYspxDmFPo5a3E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/03f86132c03660097e718217a0444080

Files

2b1935a1101b57475a451bf50c2f08f2_JaffaCakes118
.zip
03f86132c03660097e718217a0444080
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 119KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE