8aea815ae7b0f0d2d2072314003f2d86_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8aea815ae7b0f0d2d2072314003f2d86_JaffaCakes118
Size

892KB
MD5

8aea815ae7b0f0d2d2072314003f2d86
SHA1

4ddbb0eadae7ac27455fac84b55017a455248907
SHA256

132c7f5bbbdfd2e65e5a4b8d0b6e7511087d43e44761dce5420099e844ab1a28
SHA512

b4eaf75ab6022be9fd1597a3c7d6e9c26281f8186e71a1ed7afd0064a488cb44acefb0a1e864e9e01fdc834f0ad46e7443a8898617b29174a51fb95066cc504f
SSDEEP

12288:TwCXnLquXU99ICGj7xrcqPkePh+RvMaBlYJQCe2m9Or:0Fn9pGjFMePh+RpBlU69Or

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8aea815ae7b0f0d2d2072314003f2d86_JaffaCakes118

Files

8aea815ae7b0f0d2d2072314003f2d86_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 438KB - Virtual size: 828KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zz
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_MEM_READ