2fcbd532ea5d83142c8cc54bd77f7509_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fcbd532ea5d83142c8cc54bd77f7509_JaffaCakes118
Size

817KB
MD5

2fcbd532ea5d83142c8cc54bd77f7509
SHA1

2a3d18d135754a3d560292427d36e4c0b3c41b6e
SHA256

82decbb48f3e19247658ed7cb0a0a80dc901fb613eb9eabc868b248b0ae4bd3c
SHA512

c766283cc23ff599efdd680417e7fefa721f4d4c72523e916c6693770f75a941ae9bc4be74309c283a3e7d187832ad9cf193fd28b91c23218262febc47ea5005
SSDEEP

24576:nQf5zUxJ0rwC4YLR14fn3gQo3OC50TleahRh:nQRShCdLX4fwQo3reTleahRh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fcbd532ea5d83142c8cc54bd77f7509_JaffaCakes118

Files

2fcbd532ea5d83142c8cc54bd77f7509_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 716KB - Virtual size: 715KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ