8c516c3cf4793361fcf0cf609630f070_JaffaCakes118 | Triage

Sharing

General

Target

8c516c3cf4793361fcf0cf609630f070_JaffaCakes118
Size

593KB
MD5

8c516c3cf4793361fcf0cf609630f070
SHA1

b3832ede418dcc316be539117091723fb0bae9b0
SHA256

27ac3d5b8874968b9275bc6deb9cfb9132eee2efd1153782ff5d866f2956c230
SHA512

d1cfaba3fc94393dc6f152f8d30b807502946e1ca1425013659761517333de049c76ffef42334ad0dfc464eb2a8dd6df885552232e3e572630a4e161a01d4c0e
SSDEEP

12288:DHnHA3xl3n9A7Kl+9kA7oBKHuPywso9OYMkQs82um4k:DHHin9A7Kl+8BKOPFjPd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c516c3cf4793361fcf0cf609630f070_JaffaCakes118

Files

8c516c3cf4793361fcf0cf609630f070_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 503KB - Virtual size: 503KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ