f09609b626e485ee04c53ae58b58d900_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f09609b626e485ee04c53ae58b58d900_JaffaCakes118
Size

506KB
MD5

f09609b626e485ee04c53ae58b58d900
SHA1

7f3a8012437d00eee8a5789e6e973ff1c72084f1
SHA256

e3b1993be36d49337d93e739310145500811433cf255bb5254427d9179728a83
SHA512

6e45eeec419df10ec26ba086fc5d031d6d276c75d4054e232225e658d626574afb3a5139f85ad93df73c99a561d91c1b0851f8def5977e18514c6e85dee99833
SSDEEP

12288:8idP9fbvW3BB6p932UuzYgifkjdIcwpsTUq3FKjXjDaPRRJyb4QuZj:vdP9DWRB+GUlG6cwp1tTjDYRO4j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f09609b626e485ee04c53ae58b58d900_JaffaCakes118

Files

f09609b626e485ee04c53ae58b58d900_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ