8d144aa175e60ffe181620176120513d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d144aa175e60ffe181620176120513d_JaffaCakes118
Size

961KB
MD5

8d144aa175e60ffe181620176120513d
SHA1

81f6cc01a9b654992de07122f936e9df3eca24b3
SHA256

736df6dc8aa04f832a0428501e7dfde8d7c82352aaee07794bfdccdf79f97114
SHA512

ce5cfdc08682a1fde305ab718819e848b6656b225100deda74c8b3d41d959aa2d2ceffa2f05a31bc5884ae88a12ecbb967589a557e7b2a6a8a5d2d4850a48812
SSDEEP

24576:rVF3NFzDH/noOxYBh5AVDx9mqfUna5Jeq6hac/6:v3//ndv9aCp4Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d144aa175e60ffe181620176120513d_JaffaCakes118

Files

8d144aa175e60ffe181620176120513d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 3KB - Virtual size: 688KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 541.0MB

.wpnwwf
Size: 950KB - Virtual size: 952KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ