d9c87ebb19dbbf498818937aac9fdf96_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9c87ebb19dbbf498818937aac9fdf96_JaffaCakes118
Size

605KB
MD5

d9c87ebb19dbbf498818937aac9fdf96
SHA1

d160f6af69a353f5b7e11602bedaf14a0ee1bd78
SHA256

bc4497b9e53752fd5b4543a243a5169ab907f4705e725f5f7075ab3f108b99e9
SHA512

43499596b76a6c10d5959ee9a31ed2efd52dd033391ba9076f55cdc7fee7c6d52fbc9db82afc9e49f5245260c26ff10d4f026cd642156401de09032a08875c84
SSDEEP

12288:6Vx+THgsUSqs/lxpE0x98EN+5pY9+LCZCKp5s2:6HBsR/lI0jdawZPp5s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9c87ebb19dbbf498818937aac9fdf96_JaffaCakes118

Files

d9c87ebb19dbbf498818937aac9fdf96_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 419KB - Virtual size: 418KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ