8d901d5c9419bf519026f2cf06503b80_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d901d5c9419bf519026f2cf06503b80_JaffaCakes118
Size

306KB
MD5

8d901d5c9419bf519026f2cf06503b80
SHA1

bd95d416bc0551a90634f6434263bb01950683a3
SHA256

8430f7c24ca128426b42781748d83b26c944bec170b05b76d44f6bd947a8097f
SHA512

4b5c31e0c58125a3cd2e026f3f4f2fc8423cd5c684c3763714fa02a3b7bf08e4b55f4121ddbbefab93235d84b55b88a701b18b0033765247e391b3f001abaf3c
SSDEEP

6144:19Zb5pri+bdShr9VmH9RUdWAqbvbPT9DGV6XL3JjHf:1nTri+QhJVCsqpi6Xl7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d901d5c9419bf519026f2cf06503b80_JaffaCakes118

Files

8d901d5c9419bf519026f2cf06503b80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

GoogleUpdate_unsigned.pdb

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text/DE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qnk
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE