1c9809fe49e5f7985f1b96f38fbf2a52_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c9809fe49e5f7985f1b96f38fbf2a52_JaffaCakes118
Size

6KB
MD5

1c9809fe49e5f7985f1b96f38fbf2a52
SHA1

ccf450d8b183c4f037df72ab293d59e19b5b397f
SHA256

46dc8424f64f44b8835d4b4903425af105ddeed233a5bb2213754351a38b0651
SHA512

5a45345412fc8a4684c91e62d913f783707d489a0b4a9a3cf2686b9e91b3136ede990aabf135335c2d98b618237b44153c783cc5aacd61cf8402cbd43725b804
SSDEEP

192:nzMpi85t9050DSRaGLv1fIqfnh+A1OrrYiQ/So:zMp15ty50JevdIqZ+Qqo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c9809fe49e5f7985f1b96f38fbf2a52_JaffaCakes118

Files

1c9809fe49e5f7985f1b96f38fbf2a52_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 351KB - Virtual size: 351KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ