d9c1cf87bbae4f686f80c5f5d9299ce0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9c1cf87bbae4f686f80c5f5d9299ce0_JaffaCakes118
Size

191KB
MD5

d9c1cf87bbae4f686f80c5f5d9299ce0
SHA1

1cbc364e64a3fdbcbddf3026029a249660255349
SHA256

98df72bfb589e1b8ad96ee2e403b1012a22d7e175c571f2e19229176b0b2f54d
SHA512

ac96d5615017dbcaa24c0a3c6526c0a91339342f81e475ba147632270c8aaa405d722bbffbdbee32b0e1e515eaf308042a20ebff6b2f73d573d7d22d9f53f74f
SSDEEP

3072:7pFahz+xYoes3xJgXhjsWHZZTi1GfJLmMuaOi2y3QT/xnsDGi7XM7:VFS+GoeWgZsW5ggJLhuJnT/xsKiW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9c1cf87bbae4f686f80c5f5d9299ce0_JaffaCakes118

Files

d9c1cf87bbae4f686f80c5f5d9299ce0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ