8bc47edfc7d3749cc23e81005bba52f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bc47edfc7d3749cc23e81005bba52f9_JaffaCakes118
Size

2.2MB
MD5

8bc47edfc7d3749cc23e81005bba52f9
SHA1

ba118402ab9690b626b96451e297960bb1e82838
SHA256

59f8f1149eb83e25d0436d92aa26fa8b215cd41368e0370715170dcc03d73c02
SHA512

c1ae534dd84476c6d08f1cc27aa98b540c550aac4ab1d5e8c0ab1d31899a978b1b3cf2d37ed614fc03342396f6e7c6c3fe6afffe215e786d2cdbc527e3541cf4
SSDEEP

49152:kcKkcwlkJThFiPwsNVbg0gg4DqndB3au9Ew9sR6:kXThoPRTbiNq7ly6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bc47edfc7d3749cc23e81005bba52f9_JaffaCakes118

Files

8bc47edfc7d3749cc23e81005bba52f9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

77a227fbafd881410cbb799592b48d2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32 winmm

IsZoomed ,

Sections

.text
Size: 704KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ