8ada4692c8fee84b45e1a72c228f6ebc_JaffaCakes118 | Triage

Sharing

General

Target

8ada4692c8fee84b45e1a72c228f6ebc_JaffaCakes118
Size

694KB
MD5

8ada4692c8fee84b45e1a72c228f6ebc
SHA1

2873e6bce9492358f8d7ba5df733098588d8a1be
SHA256

de0fbc532887b2b1b643bbe5a80facb448b634ba8d347f8c2bef677bc06f7c30
SHA512

2d51ac45e010ac73c7332125a99fab550b72fc1459ad7c3f2593c7a208d98583827d8cfe473dbcfb22bf1d699d2a0b857f7275c0bc485c3dd85e617cd18a2ef9
SSDEEP

12288:I2zCKrWpxxIOROaDd+nbRofARmOG8BRXjIjC5HBZJM82v9:I+C5OaDd+ndhQqRHH3J92F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ada4692c8fee84b45e1a72c228f6ebc_JaffaCakes118

Files

8ada4692c8fee84b45e1a72c228f6ebc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ