8dd78e10c83b9275fdae25c1202f2f34_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8dd78e10c83b9275fdae25c1202f2f34_JaffaCakes118
Size

3.4MB
MD5

8dd78e10c83b9275fdae25c1202f2f34
SHA1

af28e79f16e9e88e49cb53b02586d4a0bee20b64
SHA256

28f72620d219a8dc6fea8c911382b60a93f8b8a75befac85618c1dd599605342
SHA512

1dd10080f8c9d24a6e5e93aa2cd750a0c9e3cf34a2e0f17d2f0a7512e3073f684f07df50e6ff19767fd09a94cc74d959fe2fb761298ff306fb58b9644ef36d36
SSDEEP

98304:yZFWkWBIp3UqfGmQudgx5vV5hn25J07wNgAtl:yZgkWmpHdf45j05J07Ul

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dd78e10c83b9275fdae25c1202f2f34_JaffaCakes118

Files

8dd78e10c83b9275fdae25c1202f2f34_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.spm
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE