09154030692970fa8d82e3cc6904a68c_JaffaCakes118 | Triage

Sharing

General

Target

09154030692970fa8d82e3cc6904a68c_JaffaCakes118
Size

1.1MB
MD5

09154030692970fa8d82e3cc6904a68c
SHA1

39bdd6f8fb2f574aaaad17f06aaed7e4615d68c0
SHA256

413c59c7b15c6f8ec904adffa00d688dca0e93bc422cfd8bc3d0208002224d0b
SHA512

fa2c65ce0a2765b3b97e92fee9e730db96e21165a2149e5266f5bf50e49dcc97fde466bf7d01fe35d440a15dffaca1663ef0184e142019d27b0435b4c954e434
SSDEEP

24576:1C7sL+juH//FIOVsEAzh4wLvkuB/uFP8EZ15ApaOU98znD:wsLUufNIAsfzh4etB/UGkh98znD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09154030692970fa8d82e3cc6904a68c_JaffaCakes118

Files

09154030692970fa8d82e3cc6904a68c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.icode
Size: 1KB - Virtual size: 6.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rbss
Size: - Virtual size: 3.0MB

.rtss
Size: - Virtual size: 480KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE