8e92580779e3b248879a3526e7ebca30_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e92580779e3b248879a3526e7ebca30_JaffaCakes118
Size

767KB
MD5

8e92580779e3b248879a3526e7ebca30
SHA1

c73a82dce9b53d05642b04154de842f4248abad1
SHA256

eb0849670f17703d1cd9be3cf0e5f6a28a3fbbf7413118a747e8e6395e4b2cab
SHA512

29baea978674288779a7c26d0171a80c7e680c99c01ff868d8a9097385374ef99b007e2b0ed4bc88519b6901e8a635212d89799a35a70fc4df7cd93b1783edb2
SSDEEP

12288:wtufvoz5f3i27gM2yTWDSAR42uN6C3/ja+Z+poKtjygWS3AJcrBQySwI3XX0uhG3:wQE5f3itM2yTWDSA4137Z+poK9ygWS3p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e92580779e3b248879a3526e7ebca30_JaffaCakes118

Files

8e92580779e3b248879a3526e7ebca30_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 45B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ