2ffd084fd477cf437b8da04c8bb1b520_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ffd084fd477cf437b8da04c8bb1b520_JaffaCakes118
Size

28KB
MD5

2ffd084fd477cf437b8da04c8bb1b520
SHA1

294c32adbf65cca8c881064435a1f166526a267f
SHA256

b7ca77d59e5d3a47f7716db93ffdb96e546d94f1c4dfc12069a313481e612e39
SHA512

e60ca5c735fda37153908fc66a9c07d39e98c773e76d313723f045ccad8726f1e46a48d430f528c94db672f1909726fbe71cdc03d6371d4f0bd0b2aedc28eda7
SSDEEP

768:1CqHZNDQpLQ/FTcDG1GU8WIGsScZXl6J4hvnW:1B5cyFawGrWJm1II/W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/X3Dcrk.exe

Files

2ffd084fd477cf437b8da04c8bb1b520_JaffaCakes118
.zip
X3Dcrk.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.shrink0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shrink1
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

in 2002
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
file_id.diz
tsrh.nfo