9d1302d7bf9da006d6157f438376d4a2_JaffaCakes118 | Triage

Sharing

General

Target

9d1302d7bf9da006d6157f438376d4a2_JaffaCakes118
Size

1.9MB
MD5

9d1302d7bf9da006d6157f438376d4a2
SHA1

90dbdaca78757b6647d01fcee8979768b5248c63
SHA256

aa772cb2dcbf58d84be623fd90095bc137cf033e4b2edfd5ebef0696136f7b5f
SHA512

90c78bf2bbe9c072874081658f378ef2546313f080530f999ec5ad99ddcb7fed913cb1ccc26496b2a909935f7163e5d14bd5144a3d7e0847e7baee65b7c58446
SSDEEP

24576:AaeH5Z7Y4LvYQNqTwVfqiSvtDsg/u8cAWTU/m0Su/K4AAXT9IOLzycJNNym7dty4:AP0mqTGywgG8/vx/K4AADLz7NpT6rG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9d1302d7bf9da006d6157f438376d4a2_JaffaCakes118

Files

9d1302d7bf9da006d6157f438376d4a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 271KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ