8969179cab5adc040ed404aeb92b925f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8969179cab5adc040ed404aeb92b925f_JaffaCakes118
Size

4.0MB
MD5

8969179cab5adc040ed404aeb92b925f
SHA1

dce4886d2f4ece680c1dccd9eb06eddc76ec1509
SHA256

0644c6ae22c96b999eb1e5d4e1fbf0afd991df68e82a979fe2abea1f6646e4e8
SHA512

36690009ac9d272ae95420e8362d7891023004d590558814c339d306b4aaa7a9fbfc7f5252ce9114ab75eb71c27c3f80b8fdaef59ea085abe238087523700886
SSDEEP

49152:zhQmdHJH1kexM/1UwGGdfWNIYde9ReGHZGQkkYoYQ+wS4h7qMA2:zhQ0HJH1kex+ANInReGHZGQknoYfki2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8969179cab5adc040ed404aeb92b925f_JaffaCakes118

Files

8969179cab5adc040ed404aeb92b925f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7.5MB - Virtual size: 7.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 235KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 237KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ