b9cf1d820b3ded682fd56ab340f4b77c_JaffaCakes118 | Triage

Sharing

General

Target

b9cf1d820b3ded682fd56ab340f4b77c_JaffaCakes118
Size

472KB
MD5

b9cf1d820b3ded682fd56ab340f4b77c
SHA1

6636a7b0d966368a679acbc17faf6c41ae0fc301
SHA256

c6df8ce4d24637dd54d6070b6b76efd5190dd061c89ecb5a91b0a6637dbcd32f
SHA512

0a0ceb5aa3a705a29d31ec4f9f29badd6b4df0e2ab0c5ef43086753648e770e837071369139e2220cdcf03da478abd0007f1d680e8dee3248a3c9226f15ae31a
SSDEEP

6144:+MnyZuvWcb8fq4LcpPQiDjRkkO6hIiNKUzBE+uPR02/uo906HudozaCOnJbxJp:tyIvr8Jum6/NKUOjRtn906Hudo23JlJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9cf1d820b3ded682fd56ab340f4b77c_JaffaCakes118

Files

b9cf1d820b3ded682fd56ab340f4b77c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 416KB - Virtual size: 415KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ