8916e82b8b9ab906d1273c0d01e52baf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8916e82b8b9ab906d1273c0d01e52baf_JaffaCakes118
Size

1.8MB
MD5

8916e82b8b9ab906d1273c0d01e52baf
SHA1

3a532f4b06bf88c6d9f977172f9b9d7be181026f
SHA256

226f3b48d46a03471405273440d97a00417067d15ad8b995b2b11b4394ea28d9
SHA512

441810c34950cbd7a0f1c8fbbdbafc6ab657cbd4eb0c47554d927d6ea34f485b92eb0b27dd50da549198da63a895259c39e45327e610ceefd2109b75d74b715f
SSDEEP

24576:VugeIPljSj/u8KzcayUmuT3QwMV0PIpT3PqPa4YOrKPsxnmRAdWdXyRxf:V6ItOjYzcXUjT3QwzwW5YiB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8916e82b8b9ab906d1273c0d01e52baf_JaffaCakes118

Files

8916e82b8b9ab906d1273c0d01e52baf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 681KB - Virtual size: 681KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 29KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ