f9487b6d09522c3b46f3efa172a8b353_JaffaCakes118 | Triage

Sharing

General

Target

f9487b6d09522c3b46f3efa172a8b353_JaffaCakes118
Size

385KB
MD5

f9487b6d09522c3b46f3efa172a8b353
SHA1

4ab3155a790347df9760f322840af2b9c1aaee33
SHA256

473361149ef821a11141f16745e51e4e6af900e3595118afb9e954939f025561
SHA512

a5362e2f7f97827e879d0d8025f6ece95cf51aec8f577ef05b730a0b9ff8420cb6d2e891c73c9b6cb226c3c42172289a8ecfcfa859ddebb7f5cdc2057e101795
SSDEEP

6144:QrgAN9mWwGCHy1Xck7ezSigDQqbuPcrVGh0zzygiI5hVLfm5QNQGPitVB:3AN9mWn1Mk7emPVbu05e05VLm5QWGiB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9487b6d09522c3b46f3efa172a8b353_JaffaCakes118

Files

f9487b6d09522c3b46f3efa172a8b353_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ