9e485a161c5f366a6f9a794c314f4294_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9e485a161c5f366a6f9a794c314f4294_JaffaCakes118
Size

1.4MB
MD5

9e485a161c5f366a6f9a794c314f4294
SHA1

8973cbd8f1deb27d757558403fc2b1510bfdbc9e
SHA256

c28b5207dee66a96b863ea07d5f76545a9799270b26f48d0e297bcd2024afc83
SHA512

685f70ac0acdf07c43d1b6ca25204079c06f3c9de65e68bd4ae50330ce866ce5b354070d3d5b7f72f86adbae5d0cf74dba1e1bb3919176ba4bb2d1e64a2bd3d9
SSDEEP

12288:s4i7SIXW6LZO6Bw2WVy3CUsSCAtfe/o63kEL1KlpgiL5whytqRdTtBlh5xDM8o5+:s/HWE5wVwCtus/PxZu5QZzvxDMdnU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9e485a161c5f366a6f9a794c314f4294_JaffaCakes118

Files

9e485a161c5f366a6f9a794c314f4294_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ