e9d28bd484dd7cbe704422a18d154892_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9d28bd484dd7cbe704422a18d154892_JaffaCakes118
Size

97KB
MD5

e9d28bd484dd7cbe704422a18d154892
SHA1

f0e734cc30455e2b82a040e6ca8fc04c4c6925b0
SHA256

cf446dda0a8092517ecdc23ac7324cb168740c248f61a194d1d5f3bf3aa6ff4e
SHA512

5297102e3bd1ee01b1e976968b6228b4f0a6f1bd3decd10cdc24e837722f642a3ceb1e019fb852d1cd5c430fc7794837a05760ba296decc2d581932ccfd10a00
SSDEEP

1536:wfGeQ8eKkdPiSbNZd+EjogX9E/rqyKZLhtWccXwLKLKduONBp:kGeQ8eKiJbNWEjoRVkLh7cXwLKuTBp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9d28bd484dd7cbe704422a18d154892_JaffaCakes118

Files

e9d28bd484dd7cbe704422a18d154892_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 993KB - Virtual size: 993KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 24KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 60B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ