8a784905f8ad20183451e800211e6cdb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a784905f8ad20183451e800211e6cdb_JaffaCakes118
Size

4.9MB
MD5

8a784905f8ad20183451e800211e6cdb
SHA1

c147d5efcae3e25a4cf15180e5067b728afe85c6
SHA256

bccec69540fab339eaf017ab3ec3dc9698f60334cca4a3c081509c0445d79c2a
SHA512

0a5625d07da1653dbf1d189faaa0a43ea7e8a74fa1e276541eed9e60c2ce94b5728d22e31b6bd2caf4deb832195ea5e855978d6bfc822b246a1ee31b85c21494
SSDEEP

49152:0FWDIvH2EHMN4SK8HDIYkasDUisMrCPGjsNn9f8WAJZKLHQMDaLN0LbUq25YmJjO:04MH2EiICsDUWrCPGobIaLHQzQUq25/8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a784905f8ad20183451e800211e6cdb_JaffaCakes118

Files

8a784905f8ad20183451e800211e6cdb_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 242KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ