2d3b95377074feefc202c58ae9d66cc4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d3b95377074feefc202c58ae9d66cc4_JaffaCakes118
Size

552KB
MD5

2d3b95377074feefc202c58ae9d66cc4
SHA1

29053ab1e5502238b7badba740e5fa5e4be97346
SHA256

a91e84b9296b6ea82f42774892df7640d4142ae9be0c1700d2e597e312f1c11d
SHA512

f8f70e19de966c332399df5b2f055c7819053e51d128e27b7616605d90dba2d7b7762472b0d180fccd3ea790535cd38c67998668d23c29da9f436a602598ec33
SSDEEP

12288:GLC8jDkcJsSxoB5HR1hJc32lprURWI+7sfxAEkEkEkEkxRxRxRxRe+e+e+e+zTzY:V8jDkcJsSxoB5HR1hJJlprURWI+7sfOU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d3b95377074feefc202c58ae9d66cc4_JaffaCakes118

Files

2d3b95377074feefc202c58ae9d66cc4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 380KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE