2bd8498e0cd265a1fb931c2809899571_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bd8498e0cd265a1fb931c2809899571_JaffaCakes118
Size

3.7MB
MD5

2bd8498e0cd265a1fb931c2809899571
SHA1

73c4b9316b646919e15fcb63d97d1316b4b6a641
SHA256

766e8b180bb3b1eaec6fcf58f63f15f3e3fd3ec1f137e74cd75fdd7a187db370
SHA512

2f5a845e6ba1ffeae64aedab6eef40c2f14122eb80b26a0c7c1e2ca3b0f77961813673cd10a342bddee9659b3bd0801b9ef2f40ca23eaf9ae256f8aa452b9084
SSDEEP

98304:NLPqCO8AbT1AY3PA38QpFcGyIog0dQiWUQiZveHp/23ElXpzOIpwNyRZyRNNkxmy:1PNYTHfA5p6QiWUQidb3EdpwNyRZyRj+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bd8498e0cd265a1fb931c2809899571_JaffaCakes118

Files

2bd8498e0cd265a1fb931c2809899571_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Sections

.text
Size: 9.1MB - Virtual size: 9.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 800KB - Virtual size: 800KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 35KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 552KB - Virtual size: 551KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ