86ed84babb0419212b4ac77fb4217269_JaffaCakes118 | Triage

Sharing

General

Target

86ed84babb0419212b4ac77fb4217269_JaffaCakes118
Size

398KB
MD5

86ed84babb0419212b4ac77fb4217269
SHA1

37676307069ff1966cb6144cff6be1b4f53cd01d
SHA256

d6b04c62d6d294fb5097b5626e33771155422a1d6855450fbd5fdcf7557670b0
SHA512

3996599cbe9376fd9ad39d447766a74f531536f24fb3d95091ef6a24c1e7f1fc942cd8b26d9e7c37983257ebccacfd22e9e3c94bd09f5c2a6868f8341c97d29c
SSDEEP

12288:4n2yGGCrEkj8dw8PJUiGuUYQlX+bxn3IGQIr8Qf4NmvbOpK:42yGGKWTJrUYaXknYA34cbJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86ed84babb0419212b4ac77fb4217269_JaffaCakes118

Files

86ed84babb0419212b4ac77fb4217269_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 1KB - Virtual size: 484KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xhi7aq
Size: 289KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 820.0MB

.data
Size: 102KB - Virtual size: 104KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE