b8c4563df5fdf7d1146ed2891fa32859_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8c4563df5fdf7d1146ed2891fa32859_JaffaCakes118
Size

121KB
MD5

b8c4563df5fdf7d1146ed2891fa32859
SHA1

d415f00c0163d485bfd88c211263012e4e793fac
SHA256

4f8e0409e3f8480a8182e52cfe3f850b0b79266531304a32ba875c3c15492090
SHA512

e48352c2236d289519b98cda4a6db6b4c9f54c02f41684eb672ceaf74a74174612518f5cb58d9062bc9a63a38e02cb4babf95c2698ee5c41c2aac36450920ad5
SSDEEP

3072:YDetgVbU3JoJg+Q1e2kpKKZi5e8oieFlljzkR9CNIq5cRDUOJ:YDetr6Jg+j9j5FzzjNIq5O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8c4563df5fdf7d1146ed2891fa32859_JaffaCakes118

Files

b8c4563df5fdf7d1146ed2891fa32859_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

code
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bss
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ