d9f9d173a21c125eb776bf638059d825_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9f9d173a21c125eb776bf638059d825_JaffaCakes118
Size

138KB
MD5

d9f9d173a21c125eb776bf638059d825
SHA1

c94d9de722574688b7b25eacea5e14e71b2d8d0a
SHA256

981f7889549fc3ea1f34768304ce68a5ec82c2d586bec5274d0866c075b9c4e1
SHA512

d54ab6fd657b86ea8cded8557bd1e827bc025f4dbc253efa4cffe5b9a24e71c9cd07d58683c0c793c6c5b440b178e3571813d764de53c426d059650337611434
SSDEEP

3072:IEWDUuuzPx+c4p75lBPfqCCw4Ki95WvSs+:8YuuzgcU7MTOR+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9f9d173a21c125eb776bf638059d825_JaffaCakes118

Files

d9f9d173a21c125eb776bf638059d825_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: - Virtual size: 953B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE