8a1adaaedb4b9681fe886eacc852fe41_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a1adaaedb4b9681fe886eacc852fe41_JaffaCakes118
Size

243KB
MD5

8a1adaaedb4b9681fe886eacc852fe41
SHA1

21f596f51aacfe865ba57b445176a8407beb9739
SHA256

87a69807d12e64bf4b3c5355005164ea36afc3ae58623e38932573877ce866f5
SHA512

fe801bef7bd2797412a0074db59f119226785ef3dc0e087f48f98f3b89c9a246b183a2abfa42e39a92310683c7b1ca00d3690881cd4b6c33ff64611ead4131be
SSDEEP

6144:C95O3pYkx+nf4Tz+kH+Zma0VQUE2YPHXtr8M9D1f/:CsYl0eZma06UMtr8kf/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a1adaaedb4b9681fe886eacc852fe41_JaffaCakes118

Files

8a1adaaedb4b9681fe886eacc852fe41_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ