a9efde08860b8c3340675c9498abf25c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9efde08860b8c3340675c9498abf25c_JaffaCakes118
Size

1.0MB
MD5

a9efde08860b8c3340675c9498abf25c
SHA1

98016f42f4cb4dd67d11d34f7d90f966d8ac5d8d
SHA256

ce1abd1fd5140c978e91744010007afb9689ece11eeea380db9f48eb02c340f2
SHA512

33cf547b9621265bbff7201647fa5b696661c171a66b32c53d70249fbbfc323b2b129d2a0a7cd43c2d4aedf5ccb6b754cfd6f759b2c4e3cdfee82a9920ba0dc2
SSDEEP

24576:g2QHB7fggYr56QCM6Na0jTiqIJmxT+cggtuA42v5H:gFHxftYr56QsNaGBIJmxTRLg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9efde08860b8c3340675c9498abf25c_JaffaCakes118

Files

a9efde08860b8c3340675c9498abf25c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 786KB - Virtual size: 786KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ