8c21a10ff316f428aa7b25ea4f5194ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c21a10ff316f428aa7b25ea4f5194ca_JaffaCakes118
Size

448KB
MD5

8c21a10ff316f428aa7b25ea4f5194ca
SHA1

3fe0169ab96c1ce39848ee7ea985bb5009bdcbad
SHA256

6556cab39c705f97cc324f58942b04e0568540272ba9e800bc93e7a49424e041
SHA512

e0512b072e1de14fc0d28a1ed426575f885d67a41f157edc0529c5c39b72ac9b61a93236f3cdb729f6989e9c3427d5abb94ec7787d1038c22c08bfaf528d86db
SSDEEP

12288:QTJfkP3XBv4Xtnm8bDv69Zxmx/Svht94HP+s19Naue:C1kPnR8o3KC+WCaf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c21a10ff316f428aa7b25ea4f5194ca_JaffaCakes118

Files

8c21a10ff316f428aa7b25ea4f5194ca_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PopSky
Size: 447KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE