e9349f37441e11afc521be11a9220ed5_JaffaCakes118 | Triage

Sharing

General

Target

e9349f37441e11afc521be11a9220ed5_JaffaCakes118
Size

506KB
MD5

e9349f37441e11afc521be11a9220ed5
SHA1

5642ca3f15add399f747e25616009edf13c9bc5c
SHA256

2cba36e0a1363f11e9ec0de914cf7a204d1f422a9f9c1b2d8daac5723115f863
SHA512

225e451b9db506da009f6d7bd30f2ee373663ed34c16236b45d3ee30c45b4ee64e0cfac40039a4e2f8830d8061b99645d4c18d80bff862b8924e69361adc4207
SSDEEP

12288:DGYZDHpi2GbjKIcqvsPBNnUrDtB5YWzcxpa9oxUoY:JNY+IvsZqpIs+UoY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9349f37441e11afc521be11a9220ed5_JaffaCakes118

Files

e9349f37441e11afc521be11a9220ed5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ