09212c993bc2b79db71d425b6a760d01_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09212c993bc2b79db71d425b6a760d01_JaffaCakes118
Size

2.1MB
MD5

09212c993bc2b79db71d425b6a760d01
SHA1

c6c831e2860eef71b7e05ac2906a5cee1ea8629d
SHA256

c662eb5a5c5d072f30cf8404822d30ca78527e84e9acb8a22d10b5520b3a6335
SHA512

488d0fe42285afd0dad9615fbfa52ecda023cf6846afb1bd35bc124dd70291fa0c9c0bdf962ae68983008f605f5b83514944d2d90f1be64f6c556eda60fcf950
SSDEEP

49152:IbJUPpm3QqlHMmpXJ1HbqscdJGPVjdwFCVeS:gUPI3Q36XGLdA9jdl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09212c993bc2b79db71d425b6a760d01_JaffaCakes118

Files

09212c993bc2b79db71d425b6a760d01_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 521KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ