8587a4b236d7ce9f3a5d345d89955cc3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8587a4b236d7ce9f3a5d345d89955cc3_JaffaCakes118
Size

1.1MB
MD5

8587a4b236d7ce9f3a5d345d89955cc3
SHA1

9f0f869383c5221d3fc6c32e58d9cb9a2471d222
SHA256

a21c79bb50c4e671a244b5d99d810b8ad803d1b2a9214045821ec21a737098fd
SHA512

27da62945d21eb992c86a5508bd8c1d369a3d5c7a391833c40be7ffe03c1b5e10342c3a6d52d65e164c664c3e23d1c82659a24d7322bf3166060f63462174670
SSDEEP

24576:KVrDj/qLyohJU7sKx7jfmVwbVMZzUix+5OqBjN+EaYf4j:KVr8y8O7sqneqbmgix+OqBraYf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8587a4b236d7ce9f3a5d345d89955cc3_JaffaCakes118

Files

8587a4b236d7ce9f3a5d345d89955cc3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 841KB - Virtual size: 840KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ