22709f7f9a8a7b787543caafae38c009_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22709f7f9a8a7b787543caafae38c009_JaffaCakes118
Size

657KB
MD5

22709f7f9a8a7b787543caafae38c009
SHA1

c85038f5b719ffb374e9d9e76e463015c478040a
SHA256

e63580b031b4696e5b9709117440ec1f6faa302991f7913dc998004a99562769
SHA512

c8dd301d9c787eab898614e458119c5519e37053cfe10a991fd7977a92abcbdb287c5b6d7991812db22acabab22b330f3cfd8ba239668eb1b01e63b46c28b052
SSDEEP

12288:jKXlUgRSNKTKmp6ggOQKwKkjsoM2Qa2DEnjeyV4p1vtIsKt/VSUTh:+CXN2pQjKUm2zXjHep1vtIrP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22709f7f9a8a7b787543caafae38c009_JaffaCakes118

Files

22709f7f9a8a7b787543caafae38c009_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 454KB - Virtual size: 454KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ