094650e78ca8e594f615b6290d0f8a93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

094650e78ca8e594f615b6290d0f8a93_JaffaCakes118
Size

3.9MB
MD5

094650e78ca8e594f615b6290d0f8a93
SHA1

51ebdb5c481b8e6dd03e7c5c4e3d3815851a9b44
SHA256

ab97eda921b6b9a01b9d2a9b3cc9c2f5d66918358778188bb434b1dba76f5f1a
SHA512

8d1dd3e7e7917054c9b7978ea8005aa2938409fd2f3fdde67189f35dcb7f9241de35b1bff05a91f2d38ab792b4db2572ecd326b4361666ed67c4f1511fbbf276
SSDEEP

6144:KHPqJkDUESJJ8qJJaiJJJJ6i/ipdveJJirj4x0JsoQJn9yIQBJiVJFJwJGJLkJi9:K6DLlXOfR2t/WD2SPYILSJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
094650e78ca8e594f615b6290d0f8a93_JaffaCakes118

Files

094650e78ca8e594f615b6290d0f8a93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 172KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 172KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ndata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3.2MB - Virtual size: 3.4MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_MEM_READ

.reloc
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_MEM_READ