b9cd799f9745f4a4d2735aa8df3788eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9cd799f9745f4a4d2735aa8df3788eb_JaffaCakes118
Size

11.3MB
MD5

b9cd799f9745f4a4d2735aa8df3788eb
SHA1

1d68d817d4ed13dccb641203947db8965234c234
SHA256

b5d73bea6fa79aa8a99d005a01881a0159a44301ee1830de1d5ddd91c0f413cd
SHA512

c3fd6ff71d3b84904e99b07b48ea218f589672254f15a8b10d739eba70d8841440336f183f44f8cf32ff193527766a4204ab4d55487f43e8608c27b18d08c14f
SSDEEP

196608:PjqYaszd3KCqzFzxGJU7M/sfF1CjfcMzeORE+W/BhbbqS3pDWpnTijsOLguF43Pw:PjqYaszNlV2BojrE5/vRxWpTijsOLguL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9cd799f9745f4a4d2735aa8df3788eb_JaffaCakes118

Files

b9cd799f9745f4a4d2735aa8df3788eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 512KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10.8MB - Virtual size: 10.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ