b9130541299e0e663a6c39895a1bcca3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9130541299e0e663a6c39895a1bcca3_JaffaCakes118
Size

904KB
MD5

b9130541299e0e663a6c39895a1bcca3
SHA1

84bdc57372ccd0c184c74049d130f7ea544dd218
SHA256

9c672d2adc94b976994126ee5ea916f4b0ac68442c94584fc61d6a80dc36e631
SHA512

d68452dffad4a13d9ce1aeb169a83b1a42335c3d8fb6c348c6f111f1b013b10af2aee80a98da16fe105b13f8ab556fff3718cd326f0cbcb78d86d7264bbbc8d8
SSDEEP

12288:s30uRsxZAxhMarNu1n5gs0xJ26qF1ca36c9U:sEUsxihMr15gsQf2Xqc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9130541299e0e663a6c39895a1bcca3_JaffaCakes118

Files

b9130541299e0e663a6c39895a1bcca3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 105KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ud2
Size: 794KB - Virtual size: 812KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE