09696c8d732fabaad98d7e40a5c03569_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09696c8d732fabaad98d7e40a5c03569_JaffaCakes118
Size

679KB
MD5

09696c8d732fabaad98d7e40a5c03569
SHA1

7eb1b817570a69a77330b6a43f593710833eb9e8
SHA256

202e2e5b2071c2e23c38b6b213187afabfc3a74133d0442fd2e7e9a954965bc1
SHA512

4ec514a12edbe7513a057ffd25b87679c8eddb7cf19955ccbfdde2a6ef10b527e7483034dd425009cbe023a62237c412c6a99a3124671c3d6ce1b802fed31822
SSDEEP

12288:oollOAoxUSJF0d4ksMyxRcIkpg2cxyS/0O6hDpbKWEFHHWTRXUkTxf12:BzOLUSJFKvLk1kO396ltbYW9XUh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09696c8d732fabaad98d7e40a5c03569_JaffaCakes118

Files

09696c8d732fabaad98d7e40a5c03569_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 438KB - Virtual size: 437KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ