8e729f8240afe8065d854562bbc0e4f8_JaffaCakes118 | Triage

Sharing

General

Target

8e729f8240afe8065d854562bbc0e4f8_JaffaCakes118
Size

768KB
MD5

8e729f8240afe8065d854562bbc0e4f8
SHA1

bb6ab048731fd87e26cda30dcb3f7fed0fe82a52
SHA256

92afcd82210dac3816ad31dda5c646caa5d66b7aca668cba528c8d881042a054
SHA512

82498c49944c21c312113dba3ea039f1d999650d56412673fc77d915533ca4982d9ec1d22370893cbdd037eef2b673aa78cf529109365d87843b6476b4544a38
SSDEEP

12288:X3TdtLW5WIj1YSSdFxIBSXyMzBUWb9lx/9AgHLo8OW+rB5F812XgYHxRIg:nDsj1dE4BcJ9nPx/igrp+nF8MXgYR/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
8e729f8240afe8065d854562bbc0e4f8_JaffaCakes118

Files

8e729f8240afe8065d854562bbc0e4f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 193KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vc++
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vsp
Size: 93KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bywsnvx
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE