0087bd445361d6d8d4968a1db4d4eceb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0087bd445361d6d8d4968a1db4d4eceb_JaffaCakes118
Size

12.0MB
MD5

0087bd445361d6d8d4968a1db4d4eceb
SHA1

c69307c3121d19c51eec085a81c911b9e796791d
SHA256

fa4ffe79bb4e0c25c3e3b97f8e2196308c04459414281d26c05d693d545bc0a4
SHA512

941e6e6ca165db6408c63e6fe929392adae08ea1cc01b0a7c499cf3840525e8756b0e2080acb1c582fb8ea321fca0c0a2ce4fc21d05f318bfc3456cb5bed2c50
SSDEEP

196608:2XueqEUU0Qqw0KQSYRHFdq4ITVn65rIcf8P4eIzsELPDQYDD8BQG9xC:wq17RFFKR66cf8yxE5BQGPC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0087bd445361d6d8d4968a1db4d4eceb_JaffaCakes118

Files

0087bd445361d6d8d4968a1db4d4eceb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CODE
Size: 471KB - Virtual size: 470KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 375KB - Virtual size: 374KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ