8ca3555846964359d281bc1823f3e22a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ca3555846964359d281bc1823f3e22a_JaffaCakes118
Size

788KB
MD5

8ca3555846964359d281bc1823f3e22a
SHA1

2abd39c750d459fc00977cfff98319a50b8ec62f
SHA256

4ba1b1670b864e2c30eefc7a6551875c5338c82b7af9e77230b54679474c90f0
SHA512

4a0c23a31751204a39e9f9246416e32ca20c0d9551a6c46e245c4cc19ac4450f50fd002665be50e019da3fdcefdebea13170a8201a84f04d79c5c583e821f243
SSDEEP

24576:M5Zi+zx1biXbBdCnOi6knstFSGy+ndLVZGVgUO+MWIt:AZi+oGn0kno7tndKqUOft

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ca3555846964359d281bc1823f3e22a_JaffaCakes118

Files

8ca3555846964359d281bc1823f3e22a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 264KB - Virtual size: 620KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Flash
Size: 506KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE