8cca38eb48e710075de1f5bc1157a5d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cca38eb48e710075de1f5bc1157a5d3_JaffaCakes118
Size

192KB
MD5

8cca38eb48e710075de1f5bc1157a5d3
SHA1

d10d96c11523a5837b5b3dfc0d2c916ca858bd8a
SHA256

918146fcbceb865306fe5b7fd7ef8d735cdeb73357943650a0271fac629d2d9d
SHA512

936103baa8311f706b95259ea874bb233904b25c5c960ba1304209d76ad2a7edca16d7fcdd00a5460d2027634dc347dd5da1afdfca4fea839c126ddb920da69b
SSDEEP

3072:rFRQXQOQPEz7yWBbRy/x6Hb0cWwgP+0bQGv9ut0fBjIEOFlLHPdMVdUPSAxbDdk:/FOQPt9NQGUEOFV1yUPHDk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cca38eb48e710075de1f5bc1157a5d3_JaffaCakes118

Files

8cca38eb48e710075de1f5bc1157a5d3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 432KB - Virtual size: 432KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ