08b616a6419623fa9bfe9869d5b0e280_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08b616a6419623fa9bfe9869d5b0e280_JaffaCakes118
Size

215KB
MD5

08b616a6419623fa9bfe9869d5b0e280
SHA1

e70a596f04b3870e67c3de9fdc536267f8412ed5
SHA256

bc1c4d14278c79cd5b7468bb5defccd76544b0af8dcf9e4026f95c578bb1adf8
SHA512

379549f559591171fb45fb6b64d200b10b6a329b0fc3456f0f52561cd03cac1d96cde975c5d8118827c3460b1567dca9f04fb1e2d8090d076739fbeaf433c63f
SSDEEP

6144:CZxHZlytTcQ2rBQwDKRpoaPp/dGjXT4sHSxPmY:AHZItTZ+Nm9dGzFHSxOY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08b616a6419623fa9bfe9869d5b0e280_JaffaCakes118

Files

08b616a6419623fa9bfe9869d5b0e280_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ