09974d02c61003aa3af1fc7ea74f9b17_JaffaCakes118 | Triage

Sharing

General

Target

09974d02c61003aa3af1fc7ea74f9b17_JaffaCakes118
Size

48KB
MD5

09974d02c61003aa3af1fc7ea74f9b17
SHA1

3887f26e41225b39bf4ee5e7e6934e0a59ecc047
SHA256

bd0ba9426c328655050362f852e98cdfa0f2ed6b83cdb832df706367b2fc2415
SHA512

caf7264e45ac626ca863442d58954463ce3f54d4436109c5b6e3f1f99a23d8f7ecd50c8f650148f5c767dfba57adecb829176e18155fdac45a89290f62c0729a
SSDEEP

768:bAPb9XnJ9NRiDtMHPUq0vud0cOJXjPs4aatRbKPXaG98Wh75tDK/Lb28OI:bAhBRItQPD0vWkJzG3CLQuDII

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09974d02c61003aa3af1fc7ea74f9b17_JaffaCakes118

Files

09974d02c61003aa3af1fc7ea74f9b17_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.naked1
Size: - Virtual size: 140KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.naked2
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MaskPE
Size: 512B - Virtual size: 422B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE