e9bade859a044f526536d47e1bb1060f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9bade859a044f526536d47e1bb1060f_JaffaCakes118
Size

967KB
MD5

e9bade859a044f526536d47e1bb1060f
SHA1

2090f7f71f2a56c5a62923633bde9d9116e2c5bb
SHA256

3da0a8d776dc80b91d72732441f95f3482f8780b0faf7405191534656cab7c58
SHA512

d894a2b22e857bad508b942d25666d513899244a4b120a21d4f5ccc4413ecec7a98c05d3f2d3dc0deed768ff43e731fb5b5218048e729a21dffc325accf83ff9
SSDEEP

24576:VgCHxNWZfBLCimMOxREM5VwS6ZMu3Rh7/s1kJWvnclYH5hK7js:PkMUthFs1k40lYDmjs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9bade859a044f526536d47e1bb1060f_JaffaCakes118

Files

e9bade859a044f526536d47e1bb1060f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: 910KB - Virtual size: 916KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE