c8e686abb697f5a5ed6497cfd087ff1d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8e686abb697f5a5ed6497cfd087ff1d_JaffaCakes118
Size

219KB
MD5

c8e686abb697f5a5ed6497cfd087ff1d
SHA1

e40f7b725d2f87c5288dd9c763ba9296032c5971
SHA256

adad61c1d7a6d56ed64c0b825c47bd61e61050d2e6ef96fd9847a1ac3b52f33d
SHA512

4284ad9cdddc7623a2f6e831121674b26bd9a84331001b585604be6632ea21023d80d27bfde04fd668b7414c5aa76c8e803a32a13e8dda73193df4f06b34ef1c
SSDEEP

1536:xiwiHRBLSUeGZPUNFEYHuYglU4PqZjw6ADQBwyQxTyHAyAWYV/Fsj:xiwinm3OCFEYHpZT06ADQ/QyfGV/6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8e686abb697f5a5ed6497cfd087ff1d_JaffaCakes118

Files

c8e686abb697f5a5ed6497cfd087ff1d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 68B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 200KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE