8c3809c17b84bde1590d6ea36e977737_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c3809c17b84bde1590d6ea36e977737_JaffaCakes118
Size

528KB
MD5

8c3809c17b84bde1590d6ea36e977737
SHA1

9e2194923ce3fa1494876b3ae4544b1747c34214
SHA256

1d459fc57f83f926171b1634989d257887ce1cbc6c0b7901807e99b4a17fa9c1
SHA512

906345910f5f332db662a196ac54c5f67a6ddd47eb31df6536a20baa5421da6c0689c3488caa04fbece0f3123c9db5c9a825c734e48af53e751925ffc82ddf35
SSDEEP

12288:iklCt4P6+oXvSMk5eAzenFiyx/TDAxUXrVPkqGKjzqXVAyxsG:rl0qtJoFr1RMqGKfqX6yxsG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c3809c17b84bde1590d6ea36e977737_JaffaCakes118

Files

8c3809c17b84bde1590d6ea36e977737_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ktext
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ldata
Size: 640KB - Virtual size: 640KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ydata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ecode
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ