e9fc01645a457dccb3c3bca61287c0cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9fc01645a457dccb3c3bca61287c0cb_JaffaCakes118
Size

578KB
MD5

e9fc01645a457dccb3c3bca61287c0cb
SHA1

03cdd4077366b04f514a76e170db246bb8f11216
SHA256

fc67d9128f91d803ba616d0baa41f6366ad3e86e4514b35b682cc51767efdeef
SHA512

bada3bee242c2f9c9138354dcf5269ff9abaf178abe5388a0b158f3e88dfb7ab75663f69fe45f880caca0d512ad944d68618d50010408ba0735bfb9d209f623d
SSDEEP

12288:jvKhy9A+6vrxExfFoGD02ZlXrbMkJth3e3F41:jv6c4VMe2XD/tJzn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9fc01645a457dccb3c3bca61287c0cb_JaffaCakes118

Files

e9fc01645a457dccb3c3bca61287c0cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 439KB - Virtual size: 438KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ