2a9727e0ffdcc08ed0678bf9cfe59803_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a9727e0ffdcc08ed0678bf9cfe59803_JaffaCakes118
Size

13.9MB
MD5

2a9727e0ffdcc08ed0678bf9cfe59803
SHA1

64ce0e6b7004060859f1128f10ab34640f794a38
SHA256

fbba4ba63660b6f70a0e06bdb8400941c23d31296536469538310c3d009706ae
SHA512

3713706ecad74ccbd8a4086c08e2da823b82cc6725f445c9f0c5d7295a92d809ca7298e975aef6e9d35b2dc7460bdf7e5d47f31daaf63268d9554052be7b88d3
SSDEEP

393216:0vsZYpO6qvZZOwbcM6CThi8WWZLaWSncazRRg3y:x6qvZZOwbcM6CThi8WWZLaWSnc+RT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a9727e0ffdcc08ed0678bf9cfe59803_JaffaCakes118

Files

2a9727e0ffdcc08ed0678bf9cfe59803_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 924KB - Virtual size: 923KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12.9MB - Virtual size: 12.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ