8ef2f8e84261e16f58058c89688d2932_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ef2f8e84261e16f58058c89688d2932_JaffaCakes118
Size

24.4MB
MD5

8ef2f8e84261e16f58058c89688d2932
SHA1

98f000f00ddcb487610073302d64fd5a55f245af
SHA256

b1f6e0899944611a5b47cea671d6798fecbc7612456bc53d2d2612056b60fa42
SHA512

bae74d3892b71e805254336d689ebe93258ce6f907fe518bd705ad02a4e1928bee5ed4d6791b4cc98f20945582da84d9d4e23ca1ce73a3c2534de15dfa57e853
SSDEEP

786432:OE3G/j6yMpijsV30UpGWnAOIlQqpX49m+:T3Gb6ydjsVBpGWAOZa4A+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ef2f8e84261e16f58058c89688d2932_JaffaCakes118

Files

8ef2f8e84261e16f58058c89688d2932_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ