8a3ad4995e39e0d00ad46d989a36d41e_JaffaCakes118 | Triage

Sharing

General

Target

8a3ad4995e39e0d00ad46d989a36d41e_JaffaCakes118
Size

352KB
MD5

8a3ad4995e39e0d00ad46d989a36d41e
SHA1

9dc3d2bac7aa507c2a6ab5b5302865f9b3229d8b
SHA256

cdb79559662a04eef18343dd087eece6f8bb2965e3de3bad51efa2dc766f2917
SHA512

b0403d526d23fc4052a4683abad54d3b396c8e5205aa768ab82be46f38b29ebacb6a4006ed28e2ea2102dd00c20e30205f3751cf1d58a1f161b85bef5f0c8e8e
SSDEEP

6144:isfPjxOW/Zaaf3Os2UVmOlII8YuUgL9B2+fy+a0u4lJE804XzhJPK:isjxOW/Z5f3o6I9YurVfy8lk4XzhlK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a3ad4995e39e0d00ad46d989a36d41e_JaffaCakes118

Files

8a3ad4995e39e0d00ad46d989a36d41e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: - Virtual size: 611KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PopSky
Size: 351KB - Virtual size: 352KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE