8299ac9d87ebfb5cb591254523676685_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8299ac9d87ebfb5cb591254523676685_JaffaCakes118
Size

4.7MB
MD5

8299ac9d87ebfb5cb591254523676685
SHA1

8c7d5405779e9562b7dd06df0091f026d5c9cfdb
SHA256

50afb69b5ae9b91f60cb6f8a6eae3fca25d6404e9600ffd5e920ae83c8ccf789
SHA512

131d3c1763c8dca4b5c476f0fc51a8bb7b82722e8224ad28dc6c647bee937af33a19af02466da797fdcc21170acf265a2142a7b210c250349c214891352dd06b
SSDEEP

98304:hYnYMyuXczI1AV+kDrF0SazCygTDuJnbRv+N+YMa2:s/LM0ecg/eivwbcN+K2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8299ac9d87ebfb5cb591254523676685_JaffaCakes118

Files

8299ac9d87ebfb5cb591254523676685_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 518KB - Virtual size: 518KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ