8397dc162c7b833f88ff57b4dc291ba7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8397dc162c7b833f88ff57b4dc291ba7_JaffaCakes118
Size

35KB
MD5

8397dc162c7b833f88ff57b4dc291ba7
SHA1

d47ef38e9a8f4201d51d1db8f8ef2e884c041b78
SHA256

ea6a74290030f474c3db353b258b235c1ab4acfff7fb648c6cf1f54fe9541b46
SHA512

c6483ffa4cf30e2131fbed2e3da2889857c7f004ca31b72abb53a4ba04b9b3010940ad68f8f04d5086fdcb72a51a84242d7b0d3970ca61cb0ba3340f76865384
SSDEEP

768:jAIOIDZlUPx+NOkw2fpvN6C+YJa6ZCKVrQCiNk3uGNxL8/gY:rFDaYlvDxYp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8397dc162c7b833f88ff57b4dc291ba7_JaffaCakes118

Files

8397dc162c7b833f88ff57b4dc291ba7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 289B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 38B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ