9fc9925a42de8c434c5faf7580daa0ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9fc9925a42de8c434c5faf7580daa0ce_JaffaCakes118
Size

264KB
MD5

9fc9925a42de8c434c5faf7580daa0ce
SHA1

7e1e7604b6291a81cf2074bfa0195ab7eaf91153
SHA256

b155ee1e71fa4a5171e44cde1692f61e3dc0251b2c6730fcccd42322c4e83697
SHA512

cf8efff0b6e595ce52e407be0daded24bef6a3af6ce9b08fdd8af3f8ef4d14a2034165b57f1cfa1c4c4ce5b1123063a82a882308465792c1a818b6bd84a3c887
SSDEEP

6144:1XirvbQ8ALtg4nDWgRAkPwtjGQn8xID0DMFlSfd2MdFrC7:gQ8ALbR3Pw5GLxe0DtFRE7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fc9925a42de8c434c5faf7580daa0ce_JaffaCakes118

Files

9fc9925a42de8c434c5faf7580daa0ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 243KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 160B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ