a8e5aa63b33aab5efcb1ecf3ef8faec5_JaffaCakes118 | Triage

Sharing

General

Target

a8e5aa63b33aab5efcb1ecf3ef8faec5_JaffaCakes118
Size

97KB
MD5

a8e5aa63b33aab5efcb1ecf3ef8faec5
SHA1

ee844ecce5f8ec78c0dabc8abd408b0192869299
SHA256

6eb08354a483c4a3b106f376f3a71f8338bcd9818ddf8e971f0d714c1980c143
SHA512

c1bb5e6b163744ec472cdba7f0b66b1a25d98491ba70236c270904d6e077bb0779763aae328e3ff0ccca686cb39a872ab41d44f8766da3082de588d444dddeac
SSDEEP

768:S0LGpjli+mDCfsT1UBNGb1UhoElv/3w5BS3vQSlzfp1RkTyP3Ieph2dDQ+FNbMDD:S0LGpjhAFKNB9lH33VTp1RkWmE6Nb2QY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8e5aa63b33aab5efcb1ecf3ef8faec5_JaffaCakes118

Files

a8e5aa63b33aab5efcb1ecf3ef8faec5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 276KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

micr_oso
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ