8ceb795a1ae48b820eac1599a2ab7fc6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ceb795a1ae48b820eac1599a2ab7fc6_JaffaCakes118
Size

68KB
MD5

8ceb795a1ae48b820eac1599a2ab7fc6
SHA1

1fefd2e57a2b18b8809a29d80647133a328baeb8
SHA256

17d7b52cd5ced2837372deb7283f0913c2b957fe3f655a82a938ac27d275c4a6
SHA512

827e93097ddd6ba84d3e17e06f23409091a80aabc3f7132d7356f9a1bd8972a983a7dd42dd82abf8d532d905c52d4f38bf8ede049c0b10e4c369f1a01037be76
SSDEEP

1536:GrGd1UsUwe3/Vc4W8AEP75QZspXthhLurmd/dKIBsCU:GroOVwKtJW8AEP7VX5KrmhLBs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ceb795a1ae48b820eac1599a2ab7fc6_JaffaCakes118

Files

8ceb795a1ae48b820eac1599a2ab7fc6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE