877a8eaae5e876c0e27a6692d238e926_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

877a8eaae5e876c0e27a6692d238e926_JaffaCakes118
Size

3.5MB
MD5

877a8eaae5e876c0e27a6692d238e926
SHA1

b12f96af20e3ee7eafcc2f2229f028eeb006ccac
SHA256

02a1693244cbb2de326d3f5976a2be07c81946aa22f37e7f6046c5d787d293c2
SHA512

5b9d313727df720fd7cb77c3fb9a4ebc65c68491cc350252321fb9bb0279fe5d95d3431ee2ee14bf4a9956e3ad9995983fe0f5e97d44c852c893b292645e1103
SSDEEP

98304:XRxoe20847SlNLlEBXEQCeoUWj5fEmo5xR07TQa2Rl:Xd208fCBXEYo5fEmj7TO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
877a8eaae5e876c0e27a6692d238e926_JaffaCakes118

Files

877a8eaae5e876c0e27a6692d238e926_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 200KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Services
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE