2f0303a852282520db86aa3d1e5659ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f0303a852282520db86aa3d1e5659ec_JaffaCakes118
Size

110KB
MD5

2f0303a852282520db86aa3d1e5659ec
SHA1

3ee048d27edb181f998ff342c817ef28a6092bf5
SHA256

34d23ab7e27451bedddf1718310a26ff6d51c7e3b22279facbf6b192da3c6f81
SHA512

0c9c51a8b5c6e7708f023c11898b1d4007312eb12a61f3137bd0698d261849e67e1876f83ae1c78051d77b6eb1b9bce8e95efe67b1edeec6bdb3983826a40e2e
SSDEEP

3072:U9xKpyyf826+u06kM4C0wQNeoBPqvtokhAlgqMdoHbqamV1/GjFIy:TByd0w2ewqiMAOqOoH2jY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f0303a852282520db86aa3d1e5659ec_JaffaCakes118

Files

2f0303a852282520db86aa3d1e5659ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ