8bbd33e34d5f3a8d9d40c0df95293172_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bbd33e34d5f3a8d9d40c0df95293172_JaffaCakes118
Size

769KB
MD5

8bbd33e34d5f3a8d9d40c0df95293172
SHA1

2533ba5b034cfff23e7d5205b6d992597bba0e97
SHA256

ebb3e5b29d2455a33c8f879416e50c03c50e391829749c98c8f63520d3be0a6e
SHA512

e2dc55bb2b0e9387c5b6129963a1f7da7cdccf3f5183dcad3169ad4481390c2d7d407e6e6fd9f61c150f7dabd37c76e6faa261931155ea4c268d564f9dc638ba
SSDEEP

12288:BgnfbrjfEvcNaNTVFD4Ktd6UplokRR0Tb96usz8BWAaOuguxCBjxJGaNChi:yfbvGckZVFDj4UHokb0Ho87gxCJx7Mhi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bbd33e34d5f3a8d9d40c0df95293172_JaffaCakes118

Files

8bbd33e34d5f3a8d9d40c0df95293172_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 729KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ESV
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE