8e0cd3fa1a00493cf6d638cf67811564_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e0cd3fa1a00493cf6d638cf67811564_JaffaCakes118
Size

263KB
MD5

8e0cd3fa1a00493cf6d638cf67811564
SHA1

4e42a876dda55122a917b5d79a459eafe5824cc9
SHA256

e4f4285f7a3eaa768da6cb03fb85d6f70a833b1aa80bdc322a039a164333ac87
SHA512

7187bcfe5805c18317c91dbb7682eeda690dbd2709a1becb2f5787da3d6aa3c958399e5c72a8109cd6cfd71fdc50e5c95b36a62852e666fb3fe7fdd94805bb0d
SSDEEP

6144:rA3zJw36lnu7+IrDtmXDMSmqks+7dB925Egj8bp:rMz2R+mDmFmqks+7dr25k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e0cd3fa1a00493cf6d638cf67811564_JaffaCakes118

Files

8e0cd3fa1a00493cf6d638cf67811564_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

mimi0
Size: - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mimi1
Size: 231KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mimi2
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mimi0
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mimi1
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ