89f9809765b3a04fb7648ba8c830f744_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89f9809765b3a04fb7648ba8c830f744_JaffaCakes118
Size

2.3MB
MD5

89f9809765b3a04fb7648ba8c830f744
SHA1

5d0832286205eb7d2dea677a861efeaa1a51a058
SHA256

fb21b811ed476fa3ee9a52f214fd4880b983d6577da1373c93abac9fe644e107
SHA512

6a45494d4f1d6e04508a16b4bf07b47d3b7534a8e074e612ecf26731b7113c0c82587da6a591b323ac84a0f39f4553fbb311f22467ac98e68b0c2e75d982521f
SSDEEP

49152:NaJFzvJN7N9jDXUAUUm1mPYnX10QrX05z6TsoKZebA5rOYiZnD:NaztN7NZDjUUm1EYX1PjazM8ebSivZnD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89f9809765b3a04fb7648ba8c830f744_JaffaCakes118

Files

89f9809765b3a04fb7648ba8c830f744_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ