2f737e0b24a1684c1568c0b3ffc67611_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f737e0b24a1684c1568c0b3ffc67611_JaffaCakes118
Size

225KB
MD5

2f737e0b24a1684c1568c0b3ffc67611
SHA1

a6ea0f443f93cac80fce4ae42aaef972b7ef0315
SHA256

6c52028087cc27e0189ad28a0f7ba7090c8344a874481c1fde07b515eeb5cf75
SHA512

5c458ac34b91ff37ba4d0171d94a1dedd1b22628c9c71a32b28de3042870a2176ff422f4db7b248eaa1d2170a7a85f3848b2a1690968006571be4c2e3ed4ad6c
SSDEEP

6144:ul3o3M7Wh//cJ5ZB6opqUHdoqU63tR7dq:ulG7sJ96xUHdoL6d1dq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f737e0b24a1684c1568c0b3ffc67611_JaffaCakes118

Files

2f737e0b24a1684c1568c0b3ffc67611_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 369B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.relo1
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ