8d2ffa2f6c2b420394a79d0f650e3a93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d2ffa2f6c2b420394a79d0f650e3a93_JaffaCakes118
Size

747KB
MD5

8d2ffa2f6c2b420394a79d0f650e3a93
SHA1

62d0cea8f30c902d84d92c482506a29b361d28cf
SHA256

684ca4ecf6320a3e1e453c7a03e607b8983cf13376d5bbd47349de23e9c06023
SHA512

8332013af71263721f944e85fb02b0e066ad8c6a6b7ce1d84a17ee05df2307dcbcf30dbe9b136b692b41371fbb13289b837abedb4cb38a002a5dbc3ea84c563e
SSDEEP

12288:Xqxc23vuCnW0omHaWri5+41txcd1A05sFy4DIk6NgX20C0zSBvgtV:X5GvfoQ5s4cIriX2mzSBvu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d2ffa2f6c2b420394a79d0f650e3a93_JaffaCakes118

Files

8d2ffa2f6c2b420394a79d0f650e3a93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.itext
Size: 3KB - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.debug
Size: - Virtual size: 3.0MB

.reloc
Size: - Virtual size: 444KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 625KB - Virtual size: 628KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE