8e99e85ddcfff6e4ad749703ea24a4d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e99e85ddcfff6e4ad749703ea24a4d2_JaffaCakes118
Size

66KB
MD5

8e99e85ddcfff6e4ad749703ea24a4d2
SHA1

92ef53cf95624dd18095579e7155251fbdd7a105
SHA256

8e76979b0209950eba4f296994878b25f58271ad17af2cb9f91a9f5c5d53512b
SHA512

0230e4c403cdb5407cc55f732a4bde2d88308878cc21e677ac7c4abef50847915076d36892b97907608d91a3a0f6c06a41b398823d77b57b941df2dedbe71e12
SSDEEP

1536:mZgO+rZyf139aqmvfupEBXGSv5nEA13CWPSg:cOUZ9OWpxSvR9PF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e99e85ddcfff6e4ad749703ea24a4d2_JaffaCakes118

Files

8e99e85ddcfff6e4ad749703ea24a4d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mackt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE