8e6d889f401fea9780e7fa02e0f72a02_JaffaCakes118 | Triage

Sharing

General

Target

8e6d889f401fea9780e7fa02e0f72a02_JaffaCakes118
Size

44KB
MD5

8e6d889f401fea9780e7fa02e0f72a02
SHA1

dca8c22c548bf98d7af069ff03383780950b43b9
SHA256

5af2f8a9ed73b19916e617a2e67e1590d4453d1d1b79d07445c66ec70b68f39d
SHA512

cca45f60a6d570cfcbef3f9bbf1ac0e39efb33b466d0ef8518ef8284df503a85e314c83f314ad83ffe7231a0051f62c8c9eac6af424f3345752e5b41cd78886d
SSDEEP

768:4tyFqk0QogowYZHOOgV0LJeGQa0yN/eupYcSymshOjk3KZOw4Hm6RJ9z4ucCYVPX:4MFqk0QogeOBV0L4GQa0yN/eupYcSymd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e6d889f401fea9780e7fa02e0f72a02_JaffaCakes118

Files

8e6d889f401fea9780e7fa02e0f72a02_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ