8c9528a3d58e6d99ae47e19c851ec47f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c9528a3d58e6d99ae47e19c851ec47f_JaffaCakes118
Size

114KB
MD5

8c9528a3d58e6d99ae47e19c851ec47f
SHA1

d3cedd7e4c3a9dd5478ca8e6bee7b022c97e1378
SHA256

f2496f833ea211f6b4aff7d991a3285faae4429c4d96d6b6d94587408199042b
SHA512

e1d4330e11560fb2670927f71e3580ebc34206075db5662415c3f3e741d67c33bdc724ee04f888d0f9ef1b2b2b7fcbb415edfa1dce114b1267f160aa41006d88
SSDEEP

3072:poGt3BbLz5UxFjY6MtxcelbYh849dOVQx3Z8sTFI:LxBzmxFcFcIbY24CVQxJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c9528a3d58e6d99ae47e19c851ec47f_JaffaCakes118

Files

8c9528a3d58e6d99ae47e19c851ec47f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ