88631b209f8791f4b0b3996b6df283d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88631b209f8791f4b0b3996b6df283d7_JaffaCakes118
Size

867KB
MD5

88631b209f8791f4b0b3996b6df283d7
SHA1

44e39e91fd6d99d960691a62cb74623a76aa6142
SHA256

aec4797f5bdce5ddcfe5cdbf143b3ce935690684a04a758a8420399bca9c0ab0
SHA512

a229dd1d1e5c1d1203a41bb51557803853c233eada13ce9c2fdc8dd8a62ab55a781098d5851248b1ef1631536b8fdddb3e74814a18b329485dfce1a972e8f487
SSDEEP

12288:IXyB6OnvPdqCni7gTltoJuJRaCXweTI7mVaX5Tjj0Jmpn6U+hUXXF65xyh:IYhvVzi7gTlWCXbSm4X5Tcs6U+haXgL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88631b209f8791f4b0b3996b6df283d7_JaffaCakes118

Files

88631b209f8791f4b0b3996b6df283d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 640KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

JCLDEBUG
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ