8ec9a92c947f915a8756dfb77dfb016f_JaffaCakes118 | Triage

Sharing

General

Target

8ec9a92c947f915a8756dfb77dfb016f_JaffaCakes118
Size

430KB
MD5

8ec9a92c947f915a8756dfb77dfb016f
SHA1

7ef8ae895c7a93cec9293eb65b5e7a3c8350cdeb
SHA256

8903555b6d9077c36a2a42939e6f81504b60a70f7da315f044d75c7419ca5f2b
SHA512

b2e583a944564105244785f1e2044e96c705d071bb0d8656c0ce9f4909ae8644fc1f129986e983c9abcc6663ab094558154c2a3eca60bdeccb26919a3e4ed378
SSDEEP

12288:mkfW51ZIf0txhAVGk8Rtpg6YrarfVirTrcoxaiz0:e5IcsGNg6YAVi3gom

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ec9a92c947f915a8756dfb77dfb016f_JaffaCakes118

Files

8ec9a92c947f915a8756dfb77dfb016f_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wextract.pdb

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yvs
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE