2cbe08ff124dde4d565368ac2f8495aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cbe08ff124dde4d565368ac2f8495aa_JaffaCakes118
Size

4.9MB
MD5

2cbe08ff124dde4d565368ac2f8495aa
SHA1

d2164a82ba08ae4edbc68d6e8fbf8c1443cb947c
SHA256

ef346801e7b5dc883787229559e604856c924a4c69625e29f08046b6230ee3cc
SHA512

e56049b0534d40884fa81524c2e5a5b24ce610a187295e3cd3e67a4044c004a5dfc0fcfb163695a63c6dd487e619e8397bae7c64dd51454297633080422cbf48
SSDEEP

98304:kw+XB3mm4vgwe9ePYpK/juG25ciQMv5J2j0pOfoJ0kxUFuckJzKi6QmMLbcA4xin:kw+XB3ZoRe9ePZ/5XiQAlpwoJk0ck1KC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cbe08ff124dde4d565368ac2f8495aa_JaffaCakes118

Files

2cbe08ff124dde4d565368ac2f8495aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ