a9a11f07a8bae127cdac30aae09d0f72_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9a11f07a8bae127cdac30aae09d0f72_JaffaCakes118
Size

706KB
MD5

a9a11f07a8bae127cdac30aae09d0f72
SHA1

ee6fd213f39f435566a71ac36f8d112f03c319a0
SHA256

bf04460f3a83348a87e56c83842ebb023b38a6a19d2bcee444cd4e1d85a4a63a
SHA512

fe6ab07e91f4ce05b499e1c303249196df7c92ef83c29bdde2d18bb4f9f7485b8da9a2849bf415e09a5efe43245522388259c1c9fcce771b1fb890cd3555e35c
SSDEEP

12288:gp/iN/mlVdtvrYeyZJf7kPK+iqBZn+D73iKHeGspo+r35JnKFjaam:gpQ/6trYlvYPK+lqD73TeGsp3LKxFm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9a11f07a8bae127cdac30aae09d0f72_JaffaCakes118

Files

a9a11f07a8bae127cdac30aae09d0f72_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 637KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ