9421c8ab4db0fa820b047aab6270d2c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9421c8ab4db0fa820b047aab6270d2c7_JaffaCakes118
Size

1.5MB
MD5

9421c8ab4db0fa820b047aab6270d2c7
SHA1

8da16c1c5b773ae980a1d2ab06f0ef56b9b45384
SHA256

24e7ac30b319292a8e95ce005e6e3e60a801c921d99ba0e6545ae257a4a06d8d
SHA512

939639e8c55d0e1920371a24bff8bb41ed11fea1823bdf96e98989700e0104be1afffccf17a9ad5201e764826c6c1b16e60ca2bf1e46910b82c165ff12f62102
SSDEEP

24576:vSCMmcWEVd0Su6/5fwoCPpmX9BbhJkQAG1UKZfg7fgAj6+6spfZBIXY:qCMsEVdpf9nXNg7RjtpfZBp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9421c8ab4db0fa820b047aab6270d2c7_JaffaCakes118

Files

9421c8ab4db0fa820b047aab6270d2c7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1000KB - Virtual size: 999KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 308KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ