de8e8fefd0b8591c41c602bcffb13d94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de8e8fefd0b8591c41c602bcffb13d94_JaffaCakes118
Size

353KB
MD5

de8e8fefd0b8591c41c602bcffb13d94
SHA1

abe16a5690ef1923778054385eb5b0113e6599f4
SHA256

f840faf0cea2aa5cf2cbafd9e530ec7664f8a09f32be6534bb62723e0e25ddf9
SHA512

68820c682c12d7cd63c38e92ca9764881ebb482f5792d3d98fc1e2a465ded4a784eb8cde7a272830c5df04d2ef13eb6bce5470c6db844320c5ecb3ff6fb530bb
SSDEEP

6144:85HX5evaSvmWdArhWFTmzpj9ZphLbpej2k2JFMrOpQe7iVLO6eIbA:keHvt+r3zlvLleSnRRiVq6dbA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de8e8fefd0b8591c41c602bcffb13d94_JaffaCakes118

Files

de8e8fefd0b8591c41c602bcffb13d94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.bss
Size: - Virtual size: 640KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: 262KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE