9544f83aba8d127e549aff54c2093c66_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9544f83aba8d127e549aff54c2093c66_JaffaCakes118
Size

11KB
MD5

9544f83aba8d127e549aff54c2093c66
SHA1

c4a670e4ded73158a5f1fb1c575cde102e890548
SHA256

82b72e92375ef3f0f7a9be17e4551bd35fb1ffed8dbe395b0dd0d7931a413e3e
SHA512

0f61a2a6e18709332aa033945cd48d1104f66e6fc5db7471bfe42d538cc1ed140c4052a053c5ffc12df95f340c6ab7c04095128793779ca66189b1fe22a18cae
SSDEEP

192:v3Y6uyv70Z0K6/41suZ3fCiAeScOXLu8VQue1UvPO06CZqgV51TqV3b0I+:v3YXyv70yf/2tFAeScYL/8gZTqV3bL+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9544f83aba8d127e549aff54c2093c66_JaffaCakes118

Files

9544f83aba8d127e549aff54c2093c66_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 836KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ