a8d8c3caf09b7e4671bb6c5cc42db681_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8d8c3caf09b7e4671bb6c5cc42db681_JaffaCakes118
Size

162KB
MD5

a8d8c3caf09b7e4671bb6c5cc42db681
SHA1

073a6973b5b4ec8269e58fef18460768b0e8c8b4
SHA256

adbdc2de19ede95d98f23538cd0db81ea7fb3260e8ec163819fbfde7c49ce5ca
SHA512

9b155ba724fa9eb6ce30a8a4abefcbdcafdc7295157b1fe8d64b5427e8e3ad76cbf4eebbbf42d79397d717e51b6bbd7ef8436b07ceab174f57b14626eecb27da
SSDEEP

3072:h5lOOdamOqj3jF5aP7FNLELzjdNZ2KpuSxmPFNWuK6UuWKMd:LlOOdamOqbjF5axNILzhX2Oxxmdo6Uu0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8d8c3caf09b7e4671bb6c5cc42db681_JaffaCakes118

Files

a8d8c3caf09b7e4671bb6c5cc42db681_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ