8b5d3f8b1b7b697156f5e4ffc10c443a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b5d3f8b1b7b697156f5e4ffc10c443a_JaffaCakes118
Size

291KB
MD5

8b5d3f8b1b7b697156f5e4ffc10c443a
SHA1

4f803ddf8fd3aee1a66ad2e9f7a156be8bef078a
SHA256

36436824c8765094a9bd5471b515ed9c7228ad54aad240d43392541716bbc291
SHA512

5108ef974030596656c2520783e7ec7b0da1031762225abbdeb0c551d71d477a7f172cd046c9338a39728d1ece93371116957ae9ebea1102938279c7709ffe94
SSDEEP

6144:iMpQ42lY/QPP9Wsrl1/soT0ZckFzPZGDq:kH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b5d3f8b1b7b697156f5e4ffc10c443a_JaffaCakes118

Files

8b5d3f8b1b7b697156f5e4ffc10c443a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ