9fd4348eb0915e957452cb03cc8db56f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9fd4348eb0915e957452cb03cc8db56f_JaffaCakes118
Size

739KB
MD5

9fd4348eb0915e957452cb03cc8db56f
SHA1

b2d076a9225bc1933325c90707ff97d98f7fba5a
SHA256

ac397181b66645218c142a8d7c254c09c62ea359d032c29e99e75bdedeabfde6
SHA512

d8c2e4bbb255af36fc89a8cac280d5f6b24a805d2fdba8cd4dd655fa9fb9dab63eb4adf31b4575bfa076bc5ab5de056e6ccecd842ff23058032dbd7e9aa4ac7c
SSDEEP

12288:xnNHl5WMKYw9anG4Ac1RUqJ+1ouTduk4zJn1saZRiHs+d75KKJD:bF5WMKMG4rM1rTduk4zJn1saZRr+d7h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fd4348eb0915e957452cb03cc8db56f_JaffaCakes118

Files

9fd4348eb0915e957452cb03cc8db56f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 9KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.udata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma1
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 165KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE