b9ff077adf4e7f8704840f7bc302d117_JaffaCakes118 | Triage

Sharing

General

Target

b9ff077adf4e7f8704840f7bc302d117_JaffaCakes118
Size

161KB
MD5

b9ff077adf4e7f8704840f7bc302d117
SHA1

c9bc9254c1bdafa0325a42890b8df22cae879bfe
SHA256

91053c0a72eb70a4cb8407d67dfd3ef34ba3e4abe98fb5be4b83c0fde7a22750
SHA512

4cdd937c7d0647405385143b1e8683814b80151d0c7081cf9eb8c4cd42523d6fd8c010daf89d14503096f1209c0376993f6e17d2bbe8aae06dc8e388f4e4e176
SSDEEP

3072:PidUfdVbMQzYaSuV9Iw1lcQWgEoCfazlgI+zotH6Yh7R:KdUHb7UarV9BaiCzuH6+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9ff077adf4e7f8704840f7bc302d117_JaffaCakes118

Files

b9ff077adf4e7f8704840f7bc302d117_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.garr
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE