2f5732b50d2b0eb096971ca0eb463e8e_JaffaCakes118 | Triage

Sharing

General

Target

2f5732b50d2b0eb096971ca0eb463e8e_JaffaCakes118
Size

779KB
MD5

2f5732b50d2b0eb096971ca0eb463e8e
SHA1

e887dded0ed224af6c80a20580a74d78b9f40c07
SHA256

afc0c7ebe8d8b71e74cccf698c51a6edc701f03caba417b2e436e3cbe2c45c5c
SHA512

fef58a907b9fbac0b91089f98853a79236c054ac6fe92e9d93960b855e5d41dd29a36492065ae872d13d47e87f9e1aa8c464b49a7b5cd7372e940b97589f988e
SSDEEP

24576:XFszWS51Ws0vRc+XxPJPlLuG59LH1Kug9Nxw:X/sp+BxP9r5ZCHw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f5732b50d2b0eb096971ca0eb463e8e_JaffaCakes118

Files

2f5732b50d2b0eb096971ca0eb463e8e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qnk
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE