2fbae2e0497bd52dbc035cc7aa6c3353_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fbae2e0497bd52dbc035cc7aa6c3353_JaffaCakes118
Size

6KB
MD5

2fbae2e0497bd52dbc035cc7aa6c3353
SHA1

af3c584ca39c047ae90497d59dba08c82693534b
SHA256

b7f24085ed6594c857ab06b58ccd3cc834059f39d01ce3d2eae8e289d242b4d3
SHA512

382a3910c9f850dfe9341a5fe0cba5c442330876507a9651582cd1514df5a884f4f272b0d8d1a732fc0332b90b1723fc92864a21016f6cffc26d78d1c17b6331
SSDEEP

96:iRaLN8bXpuazQq5uBy2gqRotg8FjjdB/8ylq2KCbyEAa:igQu5qwBy2g/tgM9/6Cbd1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fbae2e0497bd52dbc035cc7aa6c3353_JaffaCakes118

Files

2fbae2e0497bd52dbc035cc7aa6c3353_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

sfxcab.pdb

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 767KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ