2e1e9d489774871925dfbc9a73726c2a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e1e9d489774871925dfbc9a73726c2a_JaffaCakes118
Size

1011KB
MD5

2e1e9d489774871925dfbc9a73726c2a
SHA1

79bbe0c46ade7aa62b0ba56ba06cad75f9152c2f
SHA256

aae55fe9dbde1b41d9313b62995803938c125a016b9ff9acb16172139d7dd4f9
SHA512

4b789d87ca3685b9ad2ecbad28b60d3a0f832e7cdb47cf624f5a14139089cc6c21b06a75af45c343bf4b9b0a8404893e8d7df71e71d1357ca5741ad550068f6f
SSDEEP

24576:0AzPcDiP/NjBb8K6tF3Ql2aTeJctBhglDo:9kgFWK8U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e1e9d489774871925dfbc9a73726c2a_JaffaCakes118

Files

2e1e9d489774871925dfbc9a73726c2a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 910KB - Virtual size: 910KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1.3MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 40B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 842KB - Virtual size: 842KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ