9528a2e670231b6d744c52c96c89cb65_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9528a2e670231b6d744c52c96c89cb65_JaffaCakes118
Size

521KB
MD5

9528a2e670231b6d744c52c96c89cb65
SHA1

0145a9ca834272c8378efa5591f799dab8e8b9fc
SHA256

109aa02cd711450656d0b09ed8c3ce09db2f722cc1b948cb790b689dc76f0f60
SHA512

8ffcaea2a8b342585d57ba88b1aa28d7c40e05e44d01209b0738eaf588cd150be58da5f434955cea7a7322ccaee5141a7cc9c9dc4799dd4f3acdd6c4d1287316
SSDEEP

6144:9TyQO3cXgTTSjx19Ryv1fboPsBHgPhn7h41zZzgirfHLOH:9T4T83wv1fs0yPhn7h45ucDOH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9528a2e670231b6d744c52c96c89cb65_JaffaCakes118

Files

9528a2e670231b6d744c52c96c89cb65_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

AcroRd32Exe.pdb

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.uro
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE