8ef6bdf9ea233c006dd2fc6ce3ae27c8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ef6bdf9ea233c006dd2fc6ce3ae27c8_JaffaCakes118
Size

126KB
MD5

8ef6bdf9ea233c006dd2fc6ce3ae27c8
SHA1

ae5f853bff2181bd039108edd18d56e0765b7027
SHA256

cad77d7c8ade11ceeaed1237344ace43f1e8b4b9aad8f1558875bb4ffa6322a5
SHA512

71a546fe8d228b8045526ab2505fd0df722e3bd301b44255c625a8cff0966cd91d83b1ac6c86a9e10b3db5dd0a0bf49db48d2b70b9b626d2508756550295ba46
SSDEEP

3072:YSDLZbS0Ov1RisjzrS5RastWN+/2+NQdSHpZ9mqkny:YSPdS0Ov1E+3M9tM+rNh+hny

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ef6bdf9ea233c006dd2fc6ce3ae27c8_JaffaCakes118

Files

8ef6bdf9ea233c006dd2fc6ce3ae27c8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CRT
Size: 34KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CRT
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 6KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 22KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 18KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ