8ed966d9c3c389c7c4053ce10499d48a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ed966d9c3c389c7c4053ce10499d48a_JaffaCakes118
Size

77KB
MD5

8ed966d9c3c389c7c4053ce10499d48a
SHA1

29f430a8a8f3d7f5ea3a140b0cd64f7679e9fcf8
SHA256

f9661445cc16af47b202e6b9e6b42ff37bfe4b7de993d479536b9cb470f4f2c5
SHA512

084bca977dc0521fbaf3b08c9488b948f7651b7fe2959bbe98d6957290952289516b9823ded990a214e7c6fb43ee8cfdc85b622c29f8ba44ee35c35fa7826ee8
SSDEEP

1536:uRiK/GgTEHI6djov9+1X/wawRf3zFm0dkVyw2:uRi/bIEj69UXYaeYOUyw2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ed966d9c3c389c7c4053ce10499d48a_JaffaCakes118

Files

8ed966d9c3c389c7c4053ce10499d48a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

OOOOOOO1

Sections

CODE
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 293B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ