08eb67a11eea73099a383d11c9867e64_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08eb67a11eea73099a383d11c9867e64_JaffaCakes118
Size

904KB
MD5

08eb67a11eea73099a383d11c9867e64
SHA1

e3e9420deb5c5b1cba30a53e30a0223daba653a6
SHA256

57f729193b584754509f9fabffb72490950fec7070536fc00bec512ad81d9bbc
SHA512

d0266387edb87960fcfa5f4dc13dc2fdbbd45a2c53a4a5390eb972fab67896eb4695e40d727907b6d0b7e86b48930dd9b324c36901e712c765e999c6f5a62702
SSDEEP

3072:ft2cWtTBfVkfqM2SCAygRjlIqZoFzJcq0:hWtTBdsqEPxjjoFzG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08eb67a11eea73099a383d11c9867e64_JaffaCakes118

Files

08eb67a11eea73099a383d11c9867e64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 465KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ