e8a1e515657da53eea9c61194b3929a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8a1e515657da53eea9c61194b3929a2_JaffaCakes118
Size

565KB
MD5

e8a1e515657da53eea9c61194b3929a2
SHA1

d7b65b750babf3d51df4c1a25bdc074f6b2701e7
SHA256

737404b9a3cb2e671f9cb27d47d643d5d6875e426abace6c12dbba3179ea7b38
SHA512

4a56f44af2e3507a5e859e2d305542f160d8d21f4e3f74a68b80da543ed183ce74b0e682a96972cc9df4bb921518295372f8e7536393a7a808172d09d6148bab
SSDEEP

12288:ogJlwgEzPH2Ugaj6EB/sT2oyhNSQbziR42m:ogL+Hzd6EB/sdWPeu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8a1e515657da53eea9c61194b3929a2_JaffaCakes118

Files

e8a1e515657da53eea9c61194b3929a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 486KB - Virtual size: 486KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ