2fba641eab1f794187a5fbe77d37747a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fba641eab1f794187a5fbe77d37747a_JaffaCakes118
Size

361KB
MD5

2fba641eab1f794187a5fbe77d37747a
SHA1

ef027d2be75d7f1167485ffd649d189484730760
SHA256

a5930a2d29151ece71bea49b260a58776009848acc984424081c43937f1a4926
SHA512

cc9c25911a0d7f3eccde8f6398b00359b5d669f2c1663e3d43b3c09445c8e16784bcaab580242878e2e7d7b030f2485c66acfba63fcec751a1772064674285e9
SSDEEP

6144:FjWErhThujh1xbghkRxTzUMTw7qlXWoZ/8kmpLRQSIqnD9Mgh7e+fiSkdRiTY:FjHht4xUhIRzgqVWzfdph7VqRRD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fba641eab1f794187a5fbe77d37747a_JaffaCakes118

Files

2fba641eab1f794187a5fbe77d37747a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 16.1MB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 277B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zaer
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ