8a64d0b0647d689b9ff1058ee186b5a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a64d0b0647d689b9ff1058ee186b5a2_JaffaCakes118
Size

185KB
MD5

8a64d0b0647d689b9ff1058ee186b5a2
SHA1

b8a0ff920e38f72f4aa002607069e8704ec71a54
SHA256

0525cece47712f9c82fb96e986e8c395316ecbc359d62f99b1dcda1cd522bfdc
SHA512

9339d18600cb3b33e780b1caa0fc1000ac45b3491f145e18ca19f4f5d0b16df2f55bfe575199cf5f63e926d71a618a3d774829de8621f1d7177f3c4d484d809e
SSDEEP

3072:NHNvsKHpYFsLp1ZGsEK2prqR4Buej35wAGO2HLbkUQeOBlW:PkKaMp1ZGu24mx92H8MyA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a64d0b0647d689b9ff1058ee186b5a2_JaffaCakes118

Files

8a64d0b0647d689b9ff1058ee186b5a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.dlyhpk
Size: 2KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 3.0MB

.packed
Size: - Virtual size: 416KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.null
Size: 135KB - Virtual size: 136KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE