c8b6898e619c4f8903192319a9adc25c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8b6898e619c4f8903192319a9adc25c_JaffaCakes118
Size

427KB
MD5

c8b6898e619c4f8903192319a9adc25c
SHA1

05335310d007dd077a213c5c838f253c45de6928
SHA256

d1d3e0ec21cdbd09379fbef0211538360739d7756f8d7cf1e943f4e12d8bbf95
SHA512

02229d438fd6510ea47c20441cf820017fafd4e474b4870fabb855e2c28a478a872c050496c0e92b60b4f9f7faba53097bb707ca0439dc2e73f267579e58f59b
SSDEEP

6144:aiFUvYoYDm5v8DJtBTd8dbVTh2adDWAzuroj3zjlYL1Q3R+:aigYLm5EDJtBJ8hrlurovhfR+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8b6898e619c4f8903192319a9adc25c_JaffaCakes118

Files

c8b6898e619c4f8903192319a9adc25c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 232KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ