e8305195d1f0411ceeb70c5b0d769b5b_JaffaCakes118 | Triage

Sharing

General

Target

e8305195d1f0411ceeb70c5b0d769b5b_JaffaCakes118
Size

760KB
MD5

e8305195d1f0411ceeb70c5b0d769b5b
SHA1

089c2403a5fccfc423fbc8c301a9322c59225934
SHA256

af608030a061864b809e445dd63683e66e27722fbcc38f90b5e8ee2bde1aacde
SHA512

a97766933ba0996b635c823a30f0407b6bcd9574e30070be0e5702a43034818be7badbbdfcabec5afc7ceb02f606c1df052c7b58a2f77f2621fd0cf4903381c6
SSDEEP

6144:49RQZnNEg9DSxIOf4/xK2dZDk12OoONPMdLQmL6HjYO/W0q0N:0RQP9DOfoxPDpOPNP6nLtA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8305195d1f0411ceeb70c5b0d769b5b_JaffaCakes118

Files

e8305195d1f0411ceeb70c5b0d769b5b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 468KB - Virtual size: 468KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE