8e3ad24e0dd1443c4ea5862f4187bd71_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e3ad24e0dd1443c4ea5862f4187bd71_JaffaCakes118
Size

1.2MB
MD5

8e3ad24e0dd1443c4ea5862f4187bd71
SHA1

ac4e2c79ff2ffff0694b92637786602693316c79
SHA256

aee5464732ff6fdf39f9fc6ed3458f66ad6e59ddd6e7fc71012bf07ef1a1280d
SHA512

e84eeb6d42d2b8916269e4556db055d82676602166835b7baae81cce36d01e32fb06c8aa2b9ecf77cd0e1365034087f658a11621addaae15c316d72192e6c5fb
SSDEEP

24576:TErOS2L1/Y1gqzNMxzHbZY05CplGXueWdqgwZybGSX:TW4YCqz47ZAb/wZT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e3ad24e0dd1443c4ea5862f4187bd71_JaffaCakes118

Files

8e3ad24e0dd1443c4ea5862f4187bd71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 359KB - Virtual size: 358KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 831KB - Virtual size: 831KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ