0848bca88a803c50db0465560bbc1766_JaffaCakes118 | Triage

Sharing

General

Target

0848bca88a803c50db0465560bbc1766_JaffaCakes118
Size

2KB
MD5

0848bca88a803c50db0465560bbc1766
SHA1

3c75f962adeacace9856487511bc5ec5f9a28082
SHA256

6cb21e41664c3c0b5d5bd817445b8e5a68268e70af13b422dac7e2c2276721a0
SHA512

84225094451827b5fe355b0c7ad5effc64c49de513cd8ae1d9158ffc5c6f2d9e5a2f6ed112ed6857fad4985d647164565583ba8f16db96f21c6df43a5063b162

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0848bca88a803c50db0465560bbc1766_JaffaCakes118

Files

0848bca88a803c50db0465560bbc1766_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 666B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ