8ac6249366e1856d37636fb9fbf66f4b_JaffaCakes118 | Triage

Sharing

General

Target

8ac6249366e1856d37636fb9fbf66f4b_JaffaCakes118
Size

373KB
MD5

8ac6249366e1856d37636fb9fbf66f4b
SHA1

d2d3b41bf04ecee6c0df791c90244cb18a71bfb9
SHA256

f6e43b0ba3fd9d6675f51dbfc52c770769bdd761a9985b1941efa4bba27fb2a9
SHA512

f5656864e1360b66bdd47e321e4f6724ddc2df62b42555a49f3ebf3492908f8f3fa07b69ea3c5df15f7cf2c1b0f0fee22a2eb467d5d367d0e39e358df21e8038
SSDEEP

6144:4sCPFhuJQb48p0yit5uIxKtRCK8g/8RD0smqFgSA7Vkcg:7CPFhYQbVTKfx4Rygk6qFghac

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ac6249366e1856d37636fb9fbf66f4b_JaffaCakes118

Files

8ac6249366e1856d37636fb9fbf66f4b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 317KB - Virtual size: 316KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ