8a646d0bc89039d0763605000df744da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a646d0bc89039d0763605000df744da_JaffaCakes118
Size

1.3MB
MD5

8a646d0bc89039d0763605000df744da
SHA1

47e1e4dd67d62601ed8d26c56b34bf4a1b6593d0
SHA256

1e1b563efd81fa4454fb16633707c0a14735a57e379644047ccfba5269fc7f06
SHA512

ab5f89e28c4118e8ae0738bad018da9242295cb9154bc905d85954a4c359527f756eb4a1a21dc63521742fcd5a8090a99b85abdb8795dba1586bca09321cabec
SSDEEP

24576:Rio6atL70KV8Ed7lcNArD1uCbCPzzIPtU9o4YszkOuj/KMMtnESJ:tZ70w3VlcNU1ulzkP6+4YmrMMes

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a646d0bc89039d0763605000df744da_JaffaCakes118

Files

8a646d0bc89039d0763605000df744da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.-PEP-
Size: 13KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.TRIAL!
Size: 814KB - Virtual size: 816KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TRIAL!
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 372KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ