2d7e909b194826f1d5483f9292c443b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d7e909b194826f1d5483f9292c443b4_JaffaCakes118
Size

112KB
MD5

2d7e909b194826f1d5483f9292c443b4
SHA1

1da2d866d315eb36c83774be1747ac37a46873c5
SHA256

c5939672039aac78f82132c72e8ed81bc81458b19ab34f70bfe8c37b22071d8c
SHA512

9c757eaf744f7de4746ba2ebe98b94512aebc2babb8928eff76d724c328ac05682d5619cbdd2fdb419d3e5ecf72c00c7180064653ff95bbc13d824ee97e04b92
SSDEEP

1536:L9AaYeEPfGEo8GltXgFwPRXV3StgtwrlTDASgOgvrs:L9bYewfGEoLXgcR1SthlTUSgFvrs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d7e909b194826f1d5483f9292c443b4_JaffaCakes118

Files

2d7e909b194826f1d5483f9292c443b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Bss
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

cOde
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dAta
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rDaTa
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Code
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.EDAta
Size: 5KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ