2c85937c56a955f276cb2da4fe4b2b1f_JaffaCakes118 | Triage

Sharing

General

Target

2c85937c56a955f276cb2da4fe4b2b1f_JaffaCakes118
Size

6.9MB
MD5

2c85937c56a955f276cb2da4fe4b2b1f
SHA1

7b821b25d1944aeb2bc3555f6cbc8ecfb67d50fb
SHA256

d858b01b102aa1ce60391e89796a167e91de71ca21ab6324544d6552d9658267
SHA512

6b8a419306bf1fbd864563dcd34ab55cd0d9ff091a1bce4790aada93beefbcac290892c575fa94df6f5fca5793f894b753f50c34378e547db0919b03f9be6da4
SSDEEP

196608:dunpeP+HX0EGC4f/XjoeMlKAK0+KgkIJp5iCeUzFp3UvGKqQrmji4:dunpggXK/zpmd+6IJp575zUOZImji4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c85937c56a955f276cb2da4fe4b2b1f_JaffaCakes118

Files

2c85937c56a955f276cb2da4fe4b2b1f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 316KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6.5MB - Virtual size: 6.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ