c8f8f522afee29a6df21212150200a97_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8f8f522afee29a6df21212150200a97_JaffaCakes118
Size

747KB
MD5

c8f8f522afee29a6df21212150200a97
SHA1

153b1681a686e4b522cad5aeaa4c4e14185846e4
SHA256

ef2087c1f8d5341eab18dddb779f7927a9badb14f269bf01c707c7c9f8a32e22
SHA512

67cfd3a00c4d001fa5e5355fa7721c4483723dca4e29db57a68e7fdc093b3ebd241825bccdd0828a231d16f9eaf44731c6c79990602dc2729547f57c06cf63a3
SSDEEP

12288:WyX3Hicb3n7YXqNvKR3picQ9FWrmF2iKDZ82d+txyJ2RZ176vgZRXS6mXm:VTNvC3pNQ9FWU2VV89r6vMS6mW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8f8f522afee29a6df21212150200a97_JaffaCakes118

Files

c8f8f522afee29a6df21212150200a97_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 644KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE