f9faa48c0d8677b4c9470a26929e9b63_JaffaCakes118 | Triage

Sharing

General

Target

f9faa48c0d8677b4c9470a26929e9b63_JaffaCakes118
Size

1012KB
MD5

f9faa48c0d8677b4c9470a26929e9b63
SHA1

c3e7f6c7f5ac9f56e9b6a0d2d9071ad3f3ec953d
SHA256

06b6c84ebcba9a422c5d10de4ef064ab28af961bc149b84ffd2b85a14fd30980
SHA512

60d2654f74d1d1ca052a0e3052f94fcb0c9b7c25bf26098527c7e590ecc6d7348b8886afb2ab0a30c1781ff05fb5299f4627b5c0490d4fa9bc03d3d5c0a65f50
SSDEEP

12288:RnEpYUInHoDL8j8H4CrFohU9VJsU12Ycx9VECaBwQ2tb5JLrnylUPqt0gHDS7eyC:fUIHoH/rb77Hca1B+5vMiqt0gj2eR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9faa48c0d8677b4c9470a26929e9b63_JaffaCakes118

Files

f9faa48c0d8677b4c9470a26929e9b63_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ