aa8da59555f0784a8777d2b6986aa508_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa8da59555f0784a8777d2b6986aa508_JaffaCakes118
Size

404KB
MD5

aa8da59555f0784a8777d2b6986aa508
SHA1

eaeef98f6b6bfe978ee59bb364efad28d72cf4b2
SHA256

d6d5a442d16f1eb7372f1bb63d31331068ee0dc27a540d75670c7e9e35807aee
SHA512

ee282704c8304771da5b5e54956c9079617a0d72935671c369b274d86c0e38600182f010adb865f1a4424285e7a417d725e0a3b1e8da0c18cec16776bad74952
SSDEEP

6144:iEzJVFsO3rdWph4s8st231inneW7IV4w3iSVLoCkG1HuXCovNlg:3J/sO3rYpys71e0IV42oG5uXCoT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa8da59555f0784a8777d2b6986aa508_JaffaCakes118

Files

aa8da59555f0784a8777d2b6986aa508_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.MPRESS1
Size: 380KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE