9ed85b798583a3399050d9e6a3296426_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ed85b798583a3399050d9e6a3296426_JaffaCakes118
Size

24KB
MD5

9ed85b798583a3399050d9e6a3296426
SHA1

add71b39e6697f2e337f03812a029f5a65e29cfb
SHA256

ae6158b556501c99c3fd623f242ac591e24c73d8a8e578980f5c810066440245
SHA512

a94711455abeaa75a1094d10fdb705c044fba366319f0bc5147310b55a7f4fafd786975bc26e07b910452467d6678cb6cd8274972d55e23fd667f6b712ffece7
SSDEEP

384:x+ApVSdc4mm3OyYSiii56qxpaE94jvlZIr1zonvNpDZAkeb/zx3HZkHJCheu/Poo:TSEyY56jIarD63vx3HZN1pNy5qHV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ed85b798583a3399050d9e6a3296426_JaffaCakes118

Files

9ed85b798583a3399050d9e6a3296426_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 334KB - Virtual size: 334KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ