9fddd22b202e7ed432581ab9c65fc53f_JaffaCakes118 | Triage

Sharing

General

Target

9fddd22b202e7ed432581ab9c65fc53f_JaffaCakes118
Size

3.1MB
MD5

9fddd22b202e7ed432581ab9c65fc53f
SHA1

79d4ce0d96658931a3a13b5b8232674ee97cae3e
SHA256

42e708efef8f138d60fc61e9585f6b12389c7f2985b0f1c6f602d60f2aa7d723
SHA512

14bfa1b98076b4f39ffe64bf1a20438c6654d880a37311d3aba9fffb94e1eee5edadad3aab071ae60631032bdac39ed8aa1f65823c16e56cf73f62d86d44e943
SSDEEP

98304:uAfbLA5wxEPASLkVmiJogPnNweHIBebSivZnY:uUkmIASQDJoEye2UW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fddd22b202e7ed432581ab9c65fc53f_JaffaCakes118

Files

9fddd22b202e7ed432581ab9c65fc53f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ