8854aa83ef9f00f86bac989dfc6a7735_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8854aa83ef9f00f86bac989dfc6a7735_JaffaCakes118
Size

627KB
MD5

8854aa83ef9f00f86bac989dfc6a7735
SHA1

cb7ea26ac5cf20d220b9360411a8fca9b3006d67
SHA256

fbe17b88b3f8a574b38dcc5d0f36c1385339961cdeee1c59183fd5be611744e8
SHA512

2150be82ba9dd1a647a03b6a5dbf883296d031b7d3daea6b88df745d7d685a14b2b660dfefc428f2156130796f20a1196f6d93a5f4bd66c7e174da6c4baf128d
SSDEEP

12288:ff4pmiryTuYxwDgvuGUb23C3sfY0SPLpa53:ffumirwD2DWul/sM9e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8854aa83ef9f00f86bac989dfc6a7735_JaffaCakes118

Files

8854aa83ef9f00f86bac989dfc6a7735_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

MSRA.pdb

Sections

.text
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pmj
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE