8d488b05e70b4cf9b2d847864ab6f784_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d488b05e70b4cf9b2d847864ab6f784_JaffaCakes118
Size

390KB
MD5

8d488b05e70b4cf9b2d847864ab6f784
SHA1

48a01b1624dea1a63984f5cfdd071d261ea3ab99
SHA256

e7295b7c6edb413e042a051b3163dc3f9315d5ad0aa1a899db2a6f2406f07bf7
SHA512

5f08d17a79333c3465de022195214dae6da1653921a05906003553cb0df6368f6c454791e7ffe6746ce9aac0b0e2f4cca00e01964de2829dd8100a6945b5276c
SSDEEP

6144:tHPKV5541EhdTmJwy5Z74jj+9HGJHy/yb2iraqDKd4nC6830LQnBM2Ulwr:ZKVhdaomGkqpaqD44iEEnBMV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d488b05e70b4cf9b2d847864ab6f784_JaffaCakes118

Files

8d488b05e70b4cf9b2d847864ab6f784_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 331KB - Virtual size: 331KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 53KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ