08c892dfc53b952ca98d6b178f38b491_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08c892dfc53b952ca98d6b178f38b491_JaffaCakes118
Size

750KB
MD5

08c892dfc53b952ca98d6b178f38b491
SHA1

fdb61eb16a87d12ed7c08fa5b25fa6117bad0446
SHA256

f58f554eba8df1633bfe035d31e41ce0c117b321dad05e1a148a0856afccc6c9
SHA512

ac6003706f5f4ae1b8979c78cb7f30590d185c064c46c57157500c4b57d0af03d7ccb0e3215737698cdbd2d44ad60ab6a51d33366db82d112eb241750f8fb212
SSDEEP

12288:KLG2Avf5Ole+3NAYx05FMMmfkWEY/quyqh33VFt95nxU:oGnU3NAYcF5BPqTHD75nx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08c892dfc53b952ca98d6b178f38b491_JaffaCakes118

Files

08c892dfc53b952ca98d6b178f38b491_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 640KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ