09b4c03f79749b91d2f4ac999eecebc5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09b4c03f79749b91d2f4ac999eecebc5_JaffaCakes118
Size

622KB
MD5

09b4c03f79749b91d2f4ac999eecebc5
SHA1

9036635fd3a9096919a1afa49f5123480c115272
SHA256

4887600af5a1d6a67542252099c77cb54a828732e2267fc35e77bc48bd720c0e
SHA512

f812ede3d7b08d484ad5a41b7a067e75171437404f81892a30e392ce217d1eff6c8b34a2ac8ee904683648ec2e520de36abfce8cebd4d7ffdc2677b339497840
SSDEEP

12288:p1b8PGebz8dZFRC/99ipcvQkQY5C53wvuNOp5ilDuHlnmxl:p1b/azwFy99LQdmkwvXvHlnE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09b4c03f79749b91d2f4ac999eecebc5_JaffaCakes118

Files

09b4c03f79749b91d2f4ac999eecebc5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ