a8002d62ce12406a6ebcc97f2fdae3b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8002d62ce12406a6ebcc97f2fdae3b6_JaffaCakes118
Size

168KB
MD5

a8002d62ce12406a6ebcc97f2fdae3b6
SHA1

3655f74e3d284f450137b44914979ea5c0769b59
SHA256

428c7ba3929970cbb1a11236430815fd640cebe4fa02b7caaeccf9a20687f4be
SHA512

b83d5907199350d1c261db63a5d28780c65763776d86e1937f6ee7352582c9956748423a1c3134396b806f0689aed86f58e649ee9bf350db6eca7189a6e90c24
SSDEEP

3072:+TQ//tSbsjtDcY6NpNGL6mrpSz+cf0io8Fn+4iyon0BZ7PA473:0ugxpNGL6mVc0Kg0B5B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8002d62ce12406a6ebcc97f2fdae3b6_JaffaCakes118

Files

a8002d62ce12406a6ebcc97f2fdae3b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.^_^
Size: 164KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE