8e5b16dfc1d45bfc55bad0038496f57e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e5b16dfc1d45bfc55bad0038496f57e_JaffaCakes118
Size

506KB
MD5

8e5b16dfc1d45bfc55bad0038496f57e
SHA1

a8b6efc54a0b66edb129983febc320c776c2b4e1
SHA256

ff083f6c81642c4807d55a8948938a3fa4b6fd750b6a09d4745e4de275206fb8
SHA512

6db22e9a8ea1455d74a83f4a36c0f7001a36e7cbcab68942ec3aff107844e5e630f682d11f71e15e64fa1077099fdfa6838f64a12c577b56cc633e701f9024ae
SSDEEP

1536:YVIn7vLAsry2eslLS8Ti1nQyd9O3jKVfOfe6PA:YU/9+vstGGGFOfK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e5b16dfc1d45bfc55bad0038496f57e_JaffaCakes118

Files

8e5b16dfc1d45bfc55bad0038496f57e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 437KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ