8829b5c60f539fa0aa9c671cbb40dadb_JaffaCakes118 | Triage

Sharing

General

Target

8829b5c60f539fa0aa9c671cbb40dadb_JaffaCakes118
Size

721KB
MD5

8829b5c60f539fa0aa9c671cbb40dadb
SHA1

eebd0c174c4aa318637c8a97b5b2ac7be686a954
SHA256

c00df964658bcaa5b56857cf74adfe899a0347979a38b7d0fad46bacd13d06fc
SHA512

f6555e96f766d46e624223d12026ca9d33265b2e1b8f278110ea390717f208a46cec33fe21c52fb5156049c398a064e9dcc9ee521e776af1639fb6f9a58c391d
SSDEEP

12288:Fc//////rMz86mM/itg5lIQkkjXTz74FeCHVv53lppo:Fc//////rW86stQ9TTf4sW953Xpo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
8829b5c60f539fa0aa9c671cbb40dadb_JaffaCakes118

Files

8829b5c60f539fa0aa9c671cbb40dadb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 696KB - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ