95a4394e978ba0b6fddef299794c1ec5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95a4394e978ba0b6fddef299794c1ec5_JaffaCakes118
Size

137KB
MD5

95a4394e978ba0b6fddef299794c1ec5
SHA1

a084758c2bb8f48e30f0e39edc124bd2aa0cf058
SHA256

12b82615dc9b226300ae418db36e3b3ee9355b8598b9db4204f167085007d763
SHA512

c9a195db1e140eb8f3d78b731a917322cef3f6b5d1eaf0d39ce5321d2ba698524bde755c0ea4d64393457fa0d7c7b63b842e48d52b333241af806d5d7accd495
SSDEEP

1536:aE9vwPAMzbBM3my8f0hSqC0EXb52YWO5K5+TlpDEZOkTH9zzkH/jOSWyVcBV4FR+:v9vGpNM31VhSKEVY5+ThkTHsrOSo8+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95a4394e978ba0b6fddef299794c1ec5_JaffaCakes118

Files

95a4394e978ba0b6fddef299794c1ec5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ