8c3550c2a53689a50e6996e455285fa8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c3550c2a53689a50e6996e455285fa8_JaffaCakes118
Size

1.5MB
MD5

8c3550c2a53689a50e6996e455285fa8
SHA1

dc107f2e7b219b199ed394778c03a0f44b82ee03
SHA256

cf57d5add7ff1689ea01f480d55f8397ea5e45ef50fa9ad2a0fbb9d70caee03b
SHA512

e347679ff2e3774c31d9dce4adf31138888c28993d716b5a502eb4bedea5758edb4dd9abd04ec98f5c1451aaf2715b82a5651b009eaa88b12014599e742d9003
SSDEEP

24576:5/lTKHF8K42CQgHlsCpvy+gAP2xgo4+cFPtM79oUZQcV3xau90g79V:5s3MZHUF4htwnQkBg43

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c3550c2a53689a50e6996e455285fa8_JaffaCakes118

Files

8c3550c2a53689a50e6996e455285fa8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 934KB - Virtual size: 934KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 36B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 434KB - Virtual size: 434KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ