8e5a08a3e04a090f99b12696b51f28a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e5a08a3e04a090f99b12696b51f28a1_JaffaCakes118
Size

825KB
MD5

8e5a08a3e04a090f99b12696b51f28a1
SHA1

701fea32a16b9a20683f8f409e6f6aaf80a07619
SHA256

12dd6a19ab1be173253f508342b72c4f14f53cb83c833beed58421f6946dce0d
SHA512

3ba70e0e0c80e70c6c78e1e393087c93eea15b7396a2eb93b3cdbf8d3d4d7b9ebd9019687258172392106a346135f725c3d972955eee849421776f06ae942250
SSDEEP

12288:j7omQBpXLecDrxJW5A455OvwRfarIEXZDsTt2gWaCsSArCrMANtg:j0pecDrLW5A45Ao0IEXZDKYPvArEHO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e5a08a3e04a090f99b12696b51f28a1_JaffaCakes118

Files

8e5a08a3e04a090f99b12696b51f28a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 715KB - Virtual size: 715KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ