8a6a3845b59455faba46639e06547856_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a6a3845b59455faba46639e06547856_JaffaCakes118
Size

199KB
MD5

8a6a3845b59455faba46639e06547856
SHA1

f214b214ad2de55120107b7ba07c9b1257a3c424
SHA256

2735382ecf22222c404a38f6b15449c97ab4a13990c14437c049a4a408058dfb
SHA512

ea960916ad215b8149ca1557e7f76f2c83a1a6b732e059c6867947a696bc551d2b778361a6dc03a56abfc3cb4934640e9801ed3d15cca863cddaf9d67bd40b4c
SSDEEP

3072:fBf+IEQLlTZlb+6P6oyEBlH6PXfx9P8mWxeJdfKdM3I28hkB1s+mgYis+Wh2aS:fBfpllTZlb/T6X3P04yyF8hkBu4/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a6a3845b59455faba46639e06547856_JaffaCakes118

Files

8a6a3845b59455faba46639e06547856_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.tho0b2
Size: 1KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qi2uxx
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bly38x
Size: - Virtual size: 11.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jb$6qr
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.p339yb
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rtss
Size: - Virtual size: 3.0MB

.adata
Size: - Virtual size: 460KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: 196KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE