9631df3c693a2b58bad9d1f8a80c85eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9631df3c693a2b58bad9d1f8a80c85eb_JaffaCakes118
Size

986KB
MD5

9631df3c693a2b58bad9d1f8a80c85eb
SHA1

34966902069121e52dc7dc60916518b8c740e1cb
SHA256

780510df867c947646028261668565048d69e30546c23c6738fa59549f2b8ef2
SHA512

16106b65eb3e4121d095989d1e692e442209f35bbaa93556b1d8dc54d302a0414c3b19167470fb56ca487ade6a39cedb6d79db5e8e5c664ce263d0be74e88633
SSDEEP

12288:gQTZkpmMtkZmKkqp9J+4kbx9U+ur+5g9GD+r4VnWUzqX3hE9EI1Cq9rSMzCqVMz3:gC+sZmKkqVkLPKA3vwE9EIssus

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9631df3c693a2b58bad9d1f8a80c85eb_JaffaCakes118

Files

9631df3c693a2b58bad9d1f8a80c85eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 676KB - Virtual size: 676KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ