858fe0f6685ca4d02f2821d4ffa7dddc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

858fe0f6685ca4d02f2821d4ffa7dddc_JaffaCakes118
Size

2.3MB
MD5

858fe0f6685ca4d02f2821d4ffa7dddc
SHA1

b3414afa26e991dcd8c9a7d37f958be5d31a90f6
SHA256

2fb55ac804de061a41e59ce4d351e01c4c37588af2fbb60cf2a1518bb06b684b
SHA512

d919ca7d4a732272e370b2dc3ddc07834ad54ce010d97a0c5400f6808b2e232554c124e8a01389e8d111e7a0f3d1a38bf8758d03e6fe11b5d73224812baec5cf
SSDEEP

49152:RrAeWHVPrrDA5AQ1pxG/vB6od7cJyS+89rT:RrAeRyvB6od7cJyS593

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
858fe0f6685ca4d02f2821d4ffa7dddc_JaffaCakes118

Files

858fe0f6685ca4d02f2821d4ffa7dddc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.icode
Size: 860B - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 3.0MB

.idata
Size: - Virtual size: 440KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rtss
Size: 311KB - Virtual size: 312KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE