f9527664ea46e71f8430956defeeb39e_JaffaCakes118 | Triage

Sharing

General

Target

f9527664ea46e71f8430956defeeb39e_JaffaCakes118
Size

82KB
MD5

f9527664ea46e71f8430956defeeb39e
SHA1

f9e77b9a8f62c7d56e93d895e485d5307c12bd3e
SHA256

c1e4d1c2ce8ee69c3fc025ba995c3c2f81ce4fe27c31b397e89dd055182a2178
SHA512

088fe3915a8990881c4e3e3aa455b85efcc2a4f2365fd822f6a61ccada46ef2759491c8395c66343d591f434cbfc5aebf4a10cbd26d95418f5380ae3f6bbf4d1
SSDEEP

1536:yb2D5FmS6pi5rBeTTkzqmPkzOkgHI4/yc+UILS15tan:4Y5kp0OgJkm+VAQn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9527664ea46e71f8430956defeeb39e_JaffaCakes118

Files

f9527664ea46e71f8430956defeeb39e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 90KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ