9c31091898f788386fb10e65a3e418e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c31091898f788386fb10e65a3e418e7_JaffaCakes118
Size

2.1MB
MD5

9c31091898f788386fb10e65a3e418e7
SHA1

7e7c247c9dfcc17a3d807622b890e2890f1805df
SHA256

f1d866f61be4efa883f37cfcca990b11b95e79eab7fc20132a6767a25bcda5fb
SHA512

ecde69ed7f74320c1f823a0a6c54cec65b7d2c8910422f7d2f7c549937c2ea56eab610869452a29ea4fb8f45599f3f9f055b4f456efda4b96600c8d29e645c77
SSDEEP

49152:+lLFmQq/GPZXcl1Mf/8gS5KJlrPx3X4gsR3z0PX6mVJXPG:Gq+PhAEkBccGqmbXPG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c31091898f788386fb10e65a3e418e7_JaffaCakes118

Files

9c31091898f788386fb10e65a3e418e7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

TMethodImplementationIntercept

Sections

.CODE
Size: 12KB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 1009.0MB

.vuxxfp
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 135B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ