c8a15b8ab9e99678c975de0f477066d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8a15b8ab9e99678c975de0f477066d1_JaffaCakes118
Size

2.1MB
MD5

c8a15b8ab9e99678c975de0f477066d1
SHA1

d94a4dbd81e61d7815c51f7d8c722b6801033a6a
SHA256

175e74719ab84b79f1ebb51b551b4f174865b38d23641e6dd6ec36728d6d7a3b
SHA512

4b13d5eae1947fa4f4051552b51d7b704f58db21616993c9cf7a9d41e51e8a08615b38f5ebc1d5234d76cecf60ff0bb4580f622d1f08280a11068826949d5cb9
SSDEEP

49152:g2MAlgAIDaCWAyqXx1ekqzMM8ytYk42s7d3wUl1T:NMAp3C5B4LBHSjd3JfT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8a15b8ab9e99678c975de0f477066d1_JaffaCakes118

Files

c8a15b8ab9e99678c975de0f477066d1_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ