b8814e5db793aac944823cdf08efffd7_JaffaCakes118 | Triage

Sharing

General

Target

b8814e5db793aac944823cdf08efffd7_JaffaCakes118
Size

121KB
MD5

b8814e5db793aac944823cdf08efffd7
SHA1

b27b43c1a8d97a8b85801b8d7f06924289cca630
SHA256

eee076b427c204702fd16057c50e8f6708872a50332996a11874bcb54e763187
SHA512

a1cceb43f3b650fc56f8bafe55ee9e8551d80b96226684d0c18cc02c4e7a99427f7f72cffd92924b7ab6e7e4702f762051a4502ad3d6d98bb3423ad297ff6f41
SSDEEP

1536:Uu134sCroFmiXZsHUh/hsLouJ1gJcxWGd+oryMm+HYxUg0R3Yxbr:Pp4qX4UhJsLofOWGd2Mm+HyUg0R0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8814e5db793aac944823cdf08efffd7_JaffaCakes118

Files

b8814e5db793aac944823cdf08efffd7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 180B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE