9a5c1e777e587c449d1fb64ea9fa67fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a5c1e777e587c449d1fb64ea9fa67fb_JaffaCakes118
Size

945KB
MD5

9a5c1e777e587c449d1fb64ea9fa67fb
SHA1

cc4e6f9b284a965070e1722742ed691cfcf5da78
SHA256

ce1aedc382df1b960552bf732c79fc931816d8f727d1b6ec19bef1cfcdca07db
SHA512

d3b216ad599a451308d2e61bf48be643870cb02728e84db0ad679981ff54f015612f346479956f60b9d78e4354c67c7013ef79e2becb130cc36fb304a950bf8d
SSDEEP

24576:cuCCjWNdpp7D1iwKNOI4Kz4rxLnj9SrH6:cubSOwK3z4Rj0D6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a5c1e777e587c449d1fb64ea9fa67fb_JaffaCakes118

Files

9a5c1e777e587c449d1fb64ea9fa67fb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

DllFreeCc

Sections

.text
Size: 343KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tss
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 479KB - Virtual size: 479KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 61B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ