c9289cf662e4db730bc6b8d659da1cdf_JaffaCakes118 | Triage

Sharing

General

Target

c9289cf662e4db730bc6b8d659da1cdf_JaffaCakes118
Size

2.3MB
MD5

c9289cf662e4db730bc6b8d659da1cdf
SHA1

28f37f82d05cea00220a63edd25fd8eff0f3ddb3
SHA256

df166d6cf358fb759c1fb32da07815e97f5ca1342873d062a5f12edfe2f40298
SHA512

fc8f97bb093d15d465a9e12259b6f9207aa809855ec02f3d18548b4152ebf4f876de7205c0fa8cd7a7b8305275dfb07f10fbe9d56beed56f608bd915b6963654
SSDEEP

49152:7n5ehh49mN5TzniYelzlmtJsQOqjqIIZBgT3f4M:7An4Yzjmzlm/PqIIZPM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9289cf662e4db730bc6b8d659da1cdf_JaffaCakes118

Files

c9289cf662e4db730bc6b8d659da1cdf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 496KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ