8c59ea9ca3e41eedd5c67cade93819d6_JaffaCakes118 | Triage

Sharing

General

Target

8c59ea9ca3e41eedd5c67cade93819d6_JaffaCakes118
Size

11KB
MD5

8c59ea9ca3e41eedd5c67cade93819d6
SHA1

450cd61348c83bf37be5751180d7afd21f45a725
SHA256

e906d0f2c751a5fa82d7ecdf02d31b21a5d14dd4fa9f0efba0022f7b4fd55511
SHA512

67e252e711e6fd7d350fd6cdab4fa3adfdbe5d86f73d09b4c6ee797637f736e5355370652037edc4260ce0059b01881bd57072194e936539b914e8abce230cfd
SSDEEP

192:mNBws0uFYiKOwqzdBYC6RaZRqcKtvxaVTqpTXdESr4aJKtJ24LmhHyPgo:mfYiLwqEB0O/5xakpTXdRotJ24L5go

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/pepsi.exe

Files

8c59ea9ca3e41eedd5c67cade93819d6_JaffaCakes118
.zip
pepsi.exe
.exe windows:4 windows x86 arch:x86

e9fded9d8e056440997b94298b3eb945

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

vb40032

ord100
ord187
ord199
ord593
ord606

Sections

.text
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
uhanfo.exe