846cf8d0815edc8b1fe05ffa08249189_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

846cf8d0815edc8b1fe05ffa08249189_JaffaCakes118
Size

29KB
MD5

846cf8d0815edc8b1fe05ffa08249189
SHA1

b24c80a1fca32b732a61cdbfa75996e823743c2d
SHA256

98b349648c873c1f2d6bc7d4d405950e03b22af4a4d8b9f7f4f65166c4dbfce9
SHA512

e799d0afd28204e5f7972007256b374e98949002da61d36017627cadba099001b625968beb1c3680f211424428d2e1d3303661b3a9c07ce819fcce32e0150995
SSDEEP

384:GDaxguFmh+tS+006jyp9lu+D+RLa0aq3ftr8oatZuyjZC/Hs0SABMZcCkH8JXVas:GD+xoWp9Vi80aAr8oatnWs0tMkHwo8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
846cf8d0815edc8b1fe05ffa08249189_JaffaCakes118

Files

846cf8d0815edc8b1fe05ffa08249189_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 593B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ