86d9c88018310085097ba215644e0bd1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86d9c88018310085097ba215644e0bd1_JaffaCakes118
Size

182KB
MD5

86d9c88018310085097ba215644e0bd1
SHA1

399bb66c2c90bec911814475829a5d184840bad8
SHA256

65367c0bbf11ffeb3186233c0b6eae44a22e26bf4519ed29246b78f8bf9c0142
SHA512

51053c40abfddb79313e3254d958d451da72105d57009bcdec3a315f0803ab41581d1b12f7397e550054ac479c426d663f4a50103afb0333711d37aba2480137
SSDEEP

3072:rdwwOwBe/g3qzcDyvlWxmGDLbVS+C+Nh20dwBLPDUhCb+6eGOYqp78UF8z89ZHbP:rdwwOwBe/g3qzMyvlWxmsLbVS+C+Nh2E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86d9c88018310085097ba215644e0bd1_JaffaCakes118

Files

86d9c88018310085097ba215644e0bd1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 798B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ