8836f61b7589e66a86571a84f68a478b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8836f61b7589e66a86571a84f68a478b_JaffaCakes118
Size

16KB
MD5

8836f61b7589e66a86571a84f68a478b
SHA1

488c70ce678bc4cca28eb428e33bbb276b78d0b1
SHA256

2bddba22d023f3560fe6f9b6fe394a671fee8c7b646727d47c45111ee39e0b6e
SHA512

49a84f5278ca30f8a5bdbfbc2ae0f23597332041964e78b64ece52a3a5ccbb990df8bad76fe6d0a90ccf0c7d1b315ecb70c28f412b41dc131132222641e4631e
SSDEEP

192:5cFHkpmHd2YKmCq9jXvIAE59xs6oy2tIbwMhtBjYAfmjrocnF0FjcUMMST1TLF9G:G9cmJvIAETxYIb9hPjfynF0aUeZTZk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8836f61b7589e66a86571a84f68a478b_JaffaCakes118

Files

8836f61b7589e66a86571a84f68a478b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 241KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE