0009be756f688e434b8a4a19d97525ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0009be756f688e434b8a4a19d97525ca_JaffaCakes118
Size

743KB
MD5

0009be756f688e434b8a4a19d97525ca
SHA1

704d9a63add6c5ac3e9bbbffb57d6a68abec2b59
SHA256

e0f32e82eafa59c542a7b0d6d4a16e997c414b9a81ad273657d7489232dd4de3
SHA512

3cdf168248c77a62319bce15c9d5c3cb13e308b2dabe62afebb3b90375ed83eecf151e6630b5d8f742c8185413495e42b48ddb7f66f286580e0bfcbef82b656a
SSDEEP

12288:JRyTSktU4g/n/t0EW5A0zyYvJwQ5oAlK+GV4vebIk6bQQ52LgRg08y5Hyn/n:jStU4gf2EW5A2DJr/kz4vGIk6v3S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0009be756f688e434b8a4a19d97525ca_JaffaCakes118

Files

0009be756f688e434b8a4a19d97525ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 644KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ