a8fc9810ee5b808f476ed4e0fa1c1a38_JaffaCakes118 | Triage

Sharing

General

Target

a8fc9810ee5b808f476ed4e0fa1c1a38_JaffaCakes118
Size

436KB
MD5

a8fc9810ee5b808f476ed4e0fa1c1a38
SHA1

688cf8c440b70e8487574ac48cc39674d7bd7495
SHA256

e8f01098c1803a8f7db17c5f692b31d0f3c1a3f9ff85044e413b29d340d3a608
SHA512

a544d3e7336e819f4a19e7dade109b718cb6260b8e266f96c7fab015af3e00304651cb185062205e65d91f081768a3ed4a1b1ce4b09f8db8e6c3dbc9a5e34f22
SSDEEP

6144:DaexvDeF5nWuEw2LDs6XTeivyS4b/i/Mqij:Go6rnWuEwYsiTej3DcFij

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8fc9810ee5b808f476ed4e0fa1c1a38_JaffaCakes118

Files

a8fc9810ee5b808f476ed4e0fa1c1a38_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.txt2
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.txt3
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE