8e48d7950d41fd8aab2f34802d2f6b7e_JaffaCakes118 | Triage

Sharing

General

Target

8e48d7950d41fd8aab2f34802d2f6b7e_JaffaCakes118
Size

4.6MB
MD5

8e48d7950d41fd8aab2f34802d2f6b7e
SHA1

756d1ca3748ba73898a3f548499007c0f1e14be7
SHA256

badfd4259117acf2454a90757083021350d8737572bf34a0a1aeaf7b77199c4b
SHA512

e55d41d1b9c2d7d541e0395bbf3cae957913609d393656518c34b34b6ccba2021cca73e691aef02c2ec15e50a88117ab4010c79c6886b6fe2b86732861fbace2
SSDEEP

49152:qtZKGixKTqToa/sHZh3jQL3t8pCHgVjw:qfxi04oa/sHZh3jQL3t8pCHgVjw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e48d7950d41fd8aab2f34802d2f6b7e_JaffaCakes118

Files

8e48d7950d41fd8aab2f34802d2f6b7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 806KB - Virtual size: 806KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ