c8259b947b675f3cc4d107858124b0d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8259b947b675f3cc4d107858124b0d1_JaffaCakes118
Size

192KB
MD5

c8259b947b675f3cc4d107858124b0d1
SHA1

a182f8c7994aba0afc6c925a1eae1536c0048658
SHA256

49539d414eee854f87fb469200a11ebd4b3ec300c9d993203eab53f6cf18672a
SHA512

69f038dc6242c8674eeb929449be44cd0be59473fee79063cf1346d2511a302d709cbae786530ea5fb2c5e2b88046ff70ccf2aa8909c642fd81002fdbac9375b
SSDEEP

3072:IqIMVV1Xyx8Tv1WpkVbe/AA748Y8UbubLaw5K6aHkl69/zrb6hqRWI:ZxVVtyUtWyYAA768PO/vb7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8259b947b675f3cc4d107858124b0d1_JaffaCakes118

Files

c8259b947b675f3cc4d107858124b0d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ