8814b6067518166e3f51c6fb3eec5a01_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8814b6067518166e3f51c6fb3eec5a01_JaffaCakes118
Size

18KB
MD5

8814b6067518166e3f51c6fb3eec5a01
SHA1

af6510801c9840c5e934cd8dedeff422558280bb
SHA256

1413443c42c2cc833680db39da9ada1b916dfca44c5258b098c441d9f28b7875
SHA512

cf64a93e52ff38a3d198381e3556ba7996b8484041906c5d3adcf0d2e9e824fe4a1a59d760a467559d910ad448f22e49dec471815fe9ea05868c9d804f455b33
SSDEEP

384:oCe1wU+Y1uqtsMDf+Rp1AsN9ROW5TkD+u4goFK/xfWc3zU:VeDoYfTIuoqQi3A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8814b6067518166e3f51c6fb3eec5a01_JaffaCakes118

Files

8814b6067518166e3f51c6fb3eec5a01_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 662KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.6MB - Virtual size: 19.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ