8a3a5bf6514ea70a74d72329538eae3b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a3a5bf6514ea70a74d72329538eae3b_JaffaCakes118
Size

1.3MB
MD5

8a3a5bf6514ea70a74d72329538eae3b
SHA1

7be5704b4aa17ce7c325ce31907f08cc0dcea185
SHA256

c2bbacbbf4521ea9dc46e2b7b5ffa695e55715b36f3ca918c3f032762230e267
SHA512

cb9c2583329cafa28a81938fa6ec4095855799dc4ea2b34e5e5e5fe6c05d68c4792d2a9b5d15457f214d223af4ee3c62c8b9795f4c0d0f7b9a1a2e7f9ccf07c9
SSDEEP

24576:RuuFsiKNFlby/6IP89Ws9Bs71gfOzILWCyExVkdkpUwLAbiL:RBFsPNFZ46IE9Ws9BsJ0OzISCyExVkgx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a3a5bf6514ea70a74d72329538eae3b_JaffaCakes118

Files

8a3a5bf6514ea70a74d72329538eae3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 1017B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ