2fa05d278879f7fd391fe1cf304e4b33_JaffaCakes118 | Triage

Sharing

General

Target

2fa05d278879f7fd391fe1cf304e4b33_JaffaCakes118
Size

469KB
MD5

2fa05d278879f7fd391fe1cf304e4b33
SHA1

9e97c7c1650c8e04c1367625b66ef64c74d21ab3
SHA256

fab9da70d7122fa82a4caa98ccb298e371f01067f5c3be95f8860c3e7fd5f209
SHA512

f5b9b61ec1105ee4d2f2380672d46edd7b53df56c33327239b1341bf50f7feeb6197f14c16e29b53440d2262aaf0c28f897f90a7f7b8e26d30a701062bcc849b
SSDEEP

12288:P2jy4H/JlI91veibKY5q2apD7RYfiuPLYBNMUe19s8+97e5Zg:P2m4R+fFp5PapSausBNHi9bng

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fa05d278879f7fd391fe1cf304e4b33_JaffaCakes118

Files

2fa05d278879f7fd391fe1cf304e4b33_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text1
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.nkh
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE