86fec406ac71d2c54ccc4891cc876db5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86fec406ac71d2c54ccc4891cc876db5_JaffaCakes118
Size

1.9MB
MD5

86fec406ac71d2c54ccc4891cc876db5
SHA1

49a3b911c79e906a183761a9bbee802883d94f26
SHA256

d31fcf73f5edf65e93c65681757f4c34921c552107651a7dada37b2e40325ef0
SHA512

b941714e4964d6e1a2f1b78388ea52c9452f8bdc85f538e3037c62142b95b058b9cd00065352bb91cee74ca79bafd8aa5759ed10df11ccbd363278ac978f646e
SSDEEP

49152:v8KcW9ChX/SVPf+PbncN2K1sR997JwAPxN:v8KMX6VPcD22YaJb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86fec406ac71d2c54ccc4891cc876db5_JaffaCakes118

Files

86fec406ac71d2c54ccc4891cc876db5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 1KB - Virtual size: 948KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 8.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rtss
Size: - Virtual size: 3.0MB

.info
Size: - Virtual size: 432KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rbss
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE