8d9b74bcc8d40bc15a196d3e913b629d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d9b74bcc8d40bc15a196d3e913b629d_JaffaCakes118
Size

185KB
MD5

8d9b74bcc8d40bc15a196d3e913b629d
SHA1

560c39b7a5248ccac4be7c9091e0e4ef9b2e5fdf
SHA256

a98c0a295d8c75c262a026d2d65592195fc15c0c52d960ce846ae7ea727f623d
SHA512

694e7448a5f218a91eae49c2f30a5dd78a93bc280ab04db678fa6506b00189b235c953a6beea42eae2e104fc0106868ff9fc2c2f456319075f9ddf98b86405ac
SSDEEP

3072:NQIRSQ3ml/UrUb6nDvlEkYsUCBre6rm1oO2eH3OIxi/teawlxaX7I:9Rq/UrLGkgWE+X/teTlxa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d9b74bcc8d40bc15a196d3e913b629d_JaffaCakes118

Files

8d9b74bcc8d40bc15a196d3e913b629d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ