b9a22ce7fc53ada8341e42aa4cf68f0d_JaffaCakes118 | Triage

Sharing

General

Target

b9a22ce7fc53ada8341e42aa4cf68f0d_JaffaCakes118
Size

259KB
MD5

b9a22ce7fc53ada8341e42aa4cf68f0d
SHA1

845dd673cc3fbc3b10540164fa9173e00dc28155
SHA256

10cd79067422bc3bca5f80f111ba1bf37e5250165b2062f2d8175fed7a7ad8ac
SHA512

b4b3c155ec99e5ba8bc634e2c394487b273e73a6e0555e36dc22a85d80c6da008b4fe1e96efa024a86f7fdd4fc706367b92a468e6065b29e23446d0be2bd4596
SSDEEP

6144:Nf/a4d4PZ8Mx48ARZgZcRDDGTCcs+Fs+xf:NfCzx8a48BiRDDGZFLf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9a22ce7fc53ada8341e42aa4cf68f0d_JaffaCakes118

Files

b9a22ce7fc53ada8341e42aa4cf68f0d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 95KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE