298fb40ffd172ec40a06d5f19312818e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

298fb40ffd172ec40a06d5f19312818e_JaffaCakes118
Size

8.8MB
MD5

298fb40ffd172ec40a06d5f19312818e
SHA1

88fd889f2f8e4aaca88d17589c72721e50e3ce6b
SHA256

394c728a1639d8e51a869160ca4c98b7886daee0271f2545777dd365997af69b
SHA512

6a99eee60d6f555a4242044d8468d2988b9d840761c9fb19a3dd0b9f8823b6729878279ebb31f1b4b4a3133400d932e7679a7ec77b82ac13b11b61b0c9e7806a
SSDEEP

196608:kWjcQ2q2dhxjXE/10nJ943yR/qqX0QHAGQgTmUVF+:kWjZ2dhxjXEN07RSqk14TmYF+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
298fb40ffd172ec40a06d5f19312818e_JaffaCakes118

Files

298fb40ffd172ec40a06d5f19312818e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.icode
Size: 969B - Virtual size: 8.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 3.0MB

.edata
Size: - Virtual size: 404KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8.8MB - Virtual size: 8.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE