e9d317f6fa7215f1f6a8a4cc33951627_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9d317f6fa7215f1f6a8a4cc33951627_JaffaCakes118
Size

50KB
MD5

e9d317f6fa7215f1f6a8a4cc33951627
SHA1

6de74c54a86280f00f65cd6f64d286677e6efd3d
SHA256

90149b10f7f01f987494a544b6a1b7462ed6d04c374dfb6feb6d0e8cb1bae496
SHA512

899b0889eab6ad03ba960c755d1dd411eac23208b834c364fe06395f36c2906775b3c60faeecba20ce44633b3e73b344f1bdde4a1adf5071024443a125879e53
SSDEEP

768:N9RHJoqija+1IUyP92w2kH2aCiijqhlPI0UU1zv1L/GpZcK6zCVX/qL3qb+zcLO9:XRHieP992k9CIPvdXGpZLy7lztV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9d317f6fa7215f1f6a8a4cc33951627_JaffaCakes118

Files

e9d317f6fa7215f1f6a8a4cc33951627_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 12KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ