c9797f46bc0ac456bce5120eddc5072a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9797f46bc0ac456bce5120eddc5072a_JaffaCakes118
Size

46KB
MD5

c9797f46bc0ac456bce5120eddc5072a
SHA1

1e5c40ecd4d1e4fa99c077dd055d6019513fd64c
SHA256

ab954b8b71cf1c5a9ae05bdcacd84ee1d06c01eb1b5255dfddc624e8a2844f05
SHA512

64e0b46398c4926492adddad0e05611b927f833b9f0b04c0172335c3f6086a521dd404c998995dd55bae3a73ddd26b0294351c251bf9e8b724c3b6cc072a51d1
SSDEEP

768:cCpqFQAwioKZE0/3b6gkAO9t8H6JqlcaG6xuQW4WtmjbyEU21skdb38x:rpqFQjWb/3beV8aKKoHyEvbMx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9797f46bc0ac456bce5120eddc5072a_JaffaCakes118

Files

c9797f46bc0ac456bce5120eddc5072a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ