a9cb5d4c042392154af0ac07e835c014_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9cb5d4c042392154af0ac07e835c014_JaffaCakes118
Size

664KB
MD5

a9cb5d4c042392154af0ac07e835c014
SHA1

3432f6a04c4b8709f9c599dabb8f27ac4090386e
SHA256

ab919a76df5a9a99b07c6295167ee8e907b9b36a73d668a69584461cae22ebc1
SHA512

de071874aa70a85a824fcc68ce2e68ce4685c9b9d069453686810e346b7b58892fa5fc70f0d98f9e6b85c6eb7966e740f200c028a53e1edb698753b4dc73c929
SSDEEP

12288:Y8zDl8Xd4KobL2TIl4K/n+8a28jGwltu6RA/2BREqLfHIwrvpXA:Y8twd1clj+J2zwXSw7vpXA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9cb5d4c042392154af0ac07e835c014_JaffaCakes118

Files

a9cb5d4c042392154af0ac07e835c014_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 518KB - Virtual size: 517KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ