d9d4fe1dcf29a82f184f38fc0ffdf4c9_JaffaCakes118 | Triage

Sharing

General

Target

d9d4fe1dcf29a82f184f38fc0ffdf4c9_JaffaCakes118
Size

72KB
MD5

d9d4fe1dcf29a82f184f38fc0ffdf4c9
SHA1

aaf455738dcb4fb8fe46088d0d9ad585253e258d
SHA256

672c6fd5a96ec53de56242f2a497c7c0f05203144d387431ce3fe78326bc6c60
SHA512

8b67a818fbb13b38195b7958269dbe2d984074a08a8ea7dbc17711afcd041d9a5dcaae58b24132e4a0155a35a431fd9a3b53ea4866c577d9c8e3d58ae81065ff
SSDEEP

1536:ILqaQ1f4pcnfzjBs5Usp8NkV+martH8H5yCOBesA:amf4m7E5p8m1aJcHCBY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9d4fe1dcf29a82f184f38fc0ffdf4c9_JaffaCakes118

Files

d9d4fe1dcf29a82f184f38fc0ffdf4c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ