2d796b5e285d0fcfab6480fabe65359d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d796b5e285d0fcfab6480fabe65359d_JaffaCakes118
Size

803KB
MD5

2d796b5e285d0fcfab6480fabe65359d
SHA1

209b6e5f785ab712b86dd8cca5ea9a1f071c9737
SHA256

6f347ecce6383a0d7fd51f1b80471de595c0d1996d8c97c8ac97947437cf9cf3
SHA512

45defa5df3e40f18d2d21c87b09b83e66f9604f48ee6e9cabd82c9b7b6985ab3ce5d37cf4c65a83c3d37cc3d284e63d77c862ba13dd169aebe97f9647ae9bc6d
SSDEEP

1536:1YAO6tqONMClYTUfe2Djdyf/joraqdd3VF0keCjaQ6FJD54OlJbSjScWzDNDYq:lO6Ve+jskTddlFJkD5ll9ZrXq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d796b5e285d0fcfab6480fabe65359d_JaffaCakes118

Files

2d796b5e285d0fcfab6480fabe65359d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 96KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE