08826759b3c7bf89b72ceaafce7fa634_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08826759b3c7bf89b72ceaafce7fa634_JaffaCakes118
Size

709KB
MD5

08826759b3c7bf89b72ceaafce7fa634
SHA1

80cb5e7084861c11c965cf929429134d1d541205
SHA256

74e1b9d51db68d01b16a8c0a19686ca4b69e9d38881bf6c0a0890cd583a9be8f
SHA512

cd09e4297c89127767916e01d6c63a5fff4278f8a044e7e9326aeac002d0764f7417c6c9f41a2299591d2644ada056ddbd7cd256a40f3df16296039e23fa9b4f
SSDEEP

12288:MIwgeEhVoiaiWheCDrlq5DtgWz+0EMnJl2TyvonDTA3/jUb5c0nYE1ZRMX804tHx:1QEc13ertgc+ga4o9cngAs0qx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08826759b3c7bf89b72ceaafce7fa634_JaffaCakes118

Files

08826759b3c7bf89b72ceaafce7fa634_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 701KB - Virtual size: 704KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ