8f206f834d52b5c4e00a78bcb2093de1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f206f834d52b5c4e00a78bcb2093de1_JaffaCakes118
Size

2.3MB
MD5

8f206f834d52b5c4e00a78bcb2093de1
SHA1

9beba90e4d3b3d6417ac3bf2ba166cc8e965367a
SHA256

1012b56a035ffda9ee8585b8c6e9f2a58d45d5a0c8b3e6bc4a5105a9248f123e
SHA512

b801d385cd63ad525adf61d30a5b150f57768f7972b52e90d5169c5b19e0112f2e504ce9fc418eae9f042ef9bbb2ed49bfecc4d6284ef320202d11067d011e9d
SSDEEP

49152:tqSHvOJD8IfSEtYNHXm2vgfMkk6w/swJhj8ebA5rOYiZnK:4LelaYYP+RJhAebSivZnK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f206f834d52b5c4e00a78bcb2093de1_JaffaCakes118

Files

8f206f834d52b5c4e00a78bcb2093de1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ