f8e39c489e489689c8f9363299a6c6bc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f8e39c489e489689c8f9363299a6c6bc_JaffaCakes118
Size

506KB
MD5

f8e39c489e489689c8f9363299a6c6bc
SHA1

35bea9b55cc026d6c88c7f74e5520bc86fe5920c
SHA256

dc8b91f94ff5882a6328fd1959dd6220395e355b31b2812dbdc3db0084bee5e5
SHA512

c7ae8b38941989a04aa4bf668c59eb4713baa450bd0499b0d7f47eeae9a76b33ed25bb5e753c783a3fc2b794824ad9dd92ab0c109beca3b00f779fbf94e8f619
SSDEEP

12288:VosyhepDJD5f07zQdJHtXmNoeEzfQkoEu:Vi41x5fddtdJIv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8e39c489e489689c8f9363299a6c6bc_JaffaCakes118

Files

f8e39c489e489689c8f9363299a6c6bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ