8637de225f98d092c97ed68cb09caf1d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8637de225f98d092c97ed68cb09caf1d_JaffaCakes118
Size

110KB
MD5

8637de225f98d092c97ed68cb09caf1d
SHA1

368d0c2effb393ffb13a990572d23951a18f6739
SHA256

4131e94c12d63ce31696fbf478f30490500c87981a5ae2992ac5e020759aa753
SHA512

9d7cf4efe4d3f695a020e62c86db4935907a73b32381a83ea55c4aaf341f2f3eec0156a963704c8d3a149ce1ca6e9b3a26d47e720825c2c6c88f998c735751d4
SSDEEP

1536:PWCXkOn85Tx8oOyffa5h7H/2cdf09g8HJMhyH83Uh0E1sLSyygdGMGy:PWCA52oOt7hdfwXwUh0By4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8637de225f98d092c97ed68cb09caf1d_JaffaCakes118

Files

8637de225f98d092c97ed68cb09caf1d_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

__GetExceptDLLinfo
___CPPdebugHook

Sections

CODE
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 19KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE