b8f784dc1aacbc5421f6ea602a7e1047_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8f784dc1aacbc5421f6ea602a7e1047_JaffaCakes118
Size

5KB
MD5

b8f784dc1aacbc5421f6ea602a7e1047
SHA1

1055a649db39c93698ff262f6ff5b30feececca2
SHA256

11c98595e807bcac04b7c7d7515213084adbf4be3e07b1e127076d3e69dee9c8
SHA512

a1fd8690b58d6945b73fa59cf14bf73caa0c1c818f78df913751f1c855de394fcbce658d91a383c1022e17ec65b1ff079ea6da61e657719a5f8c3634ac1e5c6c
SSDEEP

96:YRVkFTxOZLGB4lUmKCzJSE0IGr/GykGBHfxjjUmiX:YRotB4RKC07/GypxsmiX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8f784dc1aacbc5421f6ea602a7e1047_JaffaCakes118

Files

b8f784dc1aacbc5421f6ea602a7e1047_JaffaCakes118
.exe windows:7 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wextract.pdb

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ