8bab12643cba9061f5394c89f35cafcd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bab12643cba9061f5394c89f35cafcd_JaffaCakes118
Size

747KB
MD5

8bab12643cba9061f5394c89f35cafcd
SHA1

ccbe205f914f0489fda1a85351d96c719184bee0
SHA256

c7eb2d94779622d361213151c25044fb9fa9f8e2076c05b8e3dc4677ce1311cf
SHA512

bd92c3c20e9056d7e7e2ed94facc3232e1a3b4fd8fe45f9808eef356c1bb5d497ccefd52923817d2012c941437be8dccb60b5cda9e11897eb2066c9c5d825556
SSDEEP

12288:/oCuX31tvrf6q7HWwN9qg2GS6RxXAr1/1K6941mKGMdb9QTX0jLry:/buvrf6q7Bb5dk1tFsmKGMdba

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bab12643cba9061f5394c89f35cafcd_JaffaCakes118

Files

8bab12643cba9061f5394c89f35cafcd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 559KB - Virtual size: 559KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ