a9cbca5b03187a9e5f65fad218685ab2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9cbca5b03187a9e5f65fad218685ab2_JaffaCakes118
Size

4.4MB
MD5

a9cbca5b03187a9e5f65fad218685ab2
SHA1

2a28734b6c26323a4539a95b9eaa961960bb9fe5
SHA256

5b283b3753f397d1fc6f1799af7e10d8dc16d04ddf04c8acdb72b1b067f0a8c4
SHA512

75cca533233e918c26edf03d582705ca3297ebf52cb14b43c58e6dc59ff67221862c926ba59705e5e2aa058eaa50f479045fd49afe42c2cbc397e9c76ee715f3
SSDEEP

98304:Z/GpdQ7ECtEWFeMuOl5/3HQsIs7p0DI0Zx+mAbe7Xg1M4mw:5Gp0FjuGB3wHi0DVv+fWXg1M4/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9cbca5b03187a9e5f65fad218685ab2_JaffaCakes118

Files

a9cbca5b03187a9e5f65fad218685ab2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 349KB - Virtual size: 764KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cdmaware
Size: 3.9MB - Virtual size: 10.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.drsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE