8e1c6bba676bf694b15e755a883b7dba_JaffaCakes118 | Triage

Sharing

General

Target

8e1c6bba676bf694b15e755a883b7dba_JaffaCakes118
Size

75KB
MD5

8e1c6bba676bf694b15e755a883b7dba
SHA1

6e255da57e7f89e00df10af47e3167525f58a61d
SHA256

e8cd4440c917beb242cfbb18feb799501dd2eef33f83419b3c2b0c21a4ae1f99
SHA512

1190d90dec829be603a87761bbe1ef874b3d17efbabd6b5f251308cf41a7754a0b787676a9d464708c18b2c6d39d71f6f4fb56abb1be458b3e1f57726512ba47
SSDEEP

1536:oBoWdHaDLw7iJju+EFEJah1B+apGLatYYaWqX:lWdHaDfJjwiahOapJtYYaWqX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e1c6bba676bf694b15e755a883b7dba_JaffaCakes118

Files

8e1c6bba676bf694b15e755a883b7dba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 10KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ