e9cf30d4a8832aa25a80337a209e61db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9cf30d4a8832aa25a80337a209e61db_JaffaCakes118
Size

640KB
MD5

e9cf30d4a8832aa25a80337a209e61db
SHA1

593dbbaf8b3d82b71e5225c19da332ef2ee2e3d4
SHA256

e9e4e91e8aa72f759c0f1f8776bac16e5cffb985df608d26e03473931f355d42
SHA512

f819eba472351d3bae7a512d566fb90115c66c71e3793e048c7c2150388cc4df3bbde8b345c18fb226368d6368e164b5d5d572c247585f742078a9c478d7b9f0
SSDEEP

6144:8rLfnSHWJLse9Ab/Qh3rvSZu3pIGYWBc52I+/dy4IRPWop/Pk8XpBKs7blrY:8XfnUUAb/QhzInJH+/dyTWodPk8Z1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9cf30d4a8832aa25a80337a209e61db_JaffaCakes118

Files

e9cf30d4a8832aa25a80337a209e61db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 448KB - Virtual size: 446KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE