2ea4cb76fcda3f848db912a217cf7f8c_JaffaCakes118 | Triage

Sharing

General

Target

2ea4cb76fcda3f848db912a217cf7f8c_JaffaCakes118
Size

148KB
MD5

2ea4cb76fcda3f848db912a217cf7f8c
SHA1

27146213717b8b03271ec71f497e0cccc72eca90
SHA256

7ac09da117e87502f858bfef0d894ed9c88542f6e87ffac0b66339b33886477d
SHA512

6ee043426c7ec060d43fe0337ab05d12deb0e7f206f6808457ba21458b53a3259e64c0e88a56d3f707aa61fc5e3259e57461309d48a04d347d90e9498a888b67
SSDEEP

3072:Oe411iUlhfysDBs7FE8d5rE8LsPO/30qJje64t9M3dNzhH1hpa+iM2aE8XLIBjB6:O1M4pDBsS8dZBEOd7H1hpDiM2O7sB6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ea4cb76fcda3f848db912a217cf7f8c_JaffaCakes118

Files

2ea4cb76fcda3f848db912a217cf7f8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ