9ca6ba69bee0156f19d58dfc83413e5a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ca6ba69bee0156f19d58dfc83413e5a_JaffaCakes118
Size

81KB
MD5

9ca6ba69bee0156f19d58dfc83413e5a
SHA1

b21eb108b759159843ffb10167a29b48a589d827
SHA256

ca98dd87535c5e770a366d9e161d6271c18640663a81cec6a2feeecf37793ba9
SHA512

36c4f63915bd6274a102484e53c45ced651fb949957ca9bd1ac9de7788381a75fd1a96f90a91fbf6de7b261b93c0e837b32d3d37d6ba2edea1121c9bc2c96d32
SSDEEP

1536:xFqsQSZRzMfmCj/5gXVV66VyUD6CS3f1Tqjd:TnZRzImCr5glVLgUDBk1uJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ca6ba69bee0156f19d58dfc83413e5a_JaffaCakes118

Files

9ca6ba69bee0156f19d58dfc83413e5a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 514KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 30B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ