8a84fc741422793c20a4d8e6a11d0d12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a84fc741422793c20a4d8e6a11d0d12_JaffaCakes118
Size

310KB
MD5

8a84fc741422793c20a4d8e6a11d0d12
SHA1

2681bd0a234e9cc5af9e6ac0df12054624c36c66
SHA256

61f29bb1f7377a3e9a2435286728fde5d4001dafe1f08c6ff111a15712f3fa34
SHA512

d0da0eb4d55959705171341f64ff18021ecb7517f1f4fa6555dc7050957d89ee796707318c43c7e8c37cfe4a599c0986aa5f05d31d57f002b11b2d9c7cc080b5
SSDEEP

3072:ocmVWD5ltbmumQ7ypHSyj6T55CclpBE/7dyH9JNLoeTD3W1HNt5qTNjgDf12SOok:/mJoeHfczlpKTIjlNW1/YTNlP4h9fiX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a84fc741422793c20a4d8e6a11d0d12_JaffaCakes118

Files

8a84fc741422793c20a4d8e6a11d0d12_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 580KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ifc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE