8a1bc1c0d977f324dbc0b1cec826e8b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a1bc1c0d977f324dbc0b1cec826e8b5_JaffaCakes118
Size

1.1MB
MD5

8a1bc1c0d977f324dbc0b1cec826e8b5
SHA1

c4c29eb1566ecd18c5198e6c6c0294fc221a43fa
SHA256

b45f807e1fc82aa4cc4978b93f58e4c51e9b64f3d41dbc13a0233426519f09c4
SHA512

26d6c77628b40ad74d32dafb06eea94856dec099d3153e204c97c6c4497aede53b3f1cd5f5472ae7c8a9e6761a6f1462399dcef2a55487f9e8e78649d441301b
SSDEEP

12288:OfeeLo+4cL3s4VTlnzK/2MS0yZN5YnjbkODvPXS3SUMmZoKYp+7wfxiJ:OWuo+4wDVTlzKbeZAnjbPmeG7t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a1bc1c0d977f324dbc0b1cec826e8b5_JaffaCakes118

Files

8a1bc1c0d977f324dbc0b1cec826e8b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 700KB - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 346KB - Virtual size: 346KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ