8a2a164482a0142728ab3bbd4559d686_JaffaCakes118 | Triage

Sharing

General

Target

8a2a164482a0142728ab3bbd4559d686_JaffaCakes118
Size

721KB
MD5

8a2a164482a0142728ab3bbd4559d686
SHA1

9db2bbe3fc8a10fd9b5a3c48c8e540c743a1c1f9
SHA256

7693781ca53fb17f4639ca60041799d2efb919301109f65caa16a41e2f96c43a
SHA512

aed8a6978aa3e263d59f2f1e6ba558b5bc238125cbfd602bfca79efd1350943dfceba3a6b9a4c14155a5b923d57009186a7a3f8896e1606bd6f9df3f39c9b4cd
SSDEEP

12288:XcFUncJ54irus265GoqlDX1YH0COI+w7Ror6PpGg+l2K3RYUOsSeysBF4vf9uQ7j:dnYnuRcBIoGblBhP7hF+f9Zn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a2a164482a0142728ab3bbd4559d686_JaffaCakes118

Files

8a2a164482a0142728ab3bbd4559d686_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 435KB - Virtual size: 434KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ