8dc37ae8d68882b850639f53d86549e3_JaffaCakes118 | Triage

Sharing

General

Target

8dc37ae8d68882b850639f53d86549e3_JaffaCakes118
Size

297KB
MD5

8dc37ae8d68882b850639f53d86549e3
SHA1

f626c0a357270f5a7734f93a6cd90a2b0d968245
SHA256

63106c72cd3815b50d1af19cd855f05f1a10b582bff9e676b72aa75d3416bc77
SHA512

1cd54e7e69424064aaa0efbc675a15ca3b0eaa8110ceca746c48df4e4f2522ec6a9ad8be67f70547036094997a274c3856105ae853ed84cc9683205f90fcebf1
SSDEEP

6144:uNRCZc38uF33GCMwrtm9JYcsIhVr2KEo0gwSqgcWacBvQYjxHLg+lIfJFP:+RCA8/j5xr2K4gvFnlYl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dc37ae8d68882b850639f53d86549e3_JaffaCakes118

Files

8dc37ae8d68882b850639f53d86549e3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE