f7009fd341b1b351d97140f0641da43b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7009fd341b1b351d97140f0641da43b_JaffaCakes118
Size

493KB
MD5

f7009fd341b1b351d97140f0641da43b
SHA1

4c08722bc756b1de3eb8533155d8defaf810b098
SHA256

eb26b4d71909cb151a9c6e5e7893615846d477abf863cca100ebe17cb47c9e62
SHA512

0fb8f9d9c94acab442a7bf08e2613e4b6c77e4661fc3b16a6e35ef42cbdb3b6d02a9f242d2da69e8917ccdf4ca3476927f03eb4909d06aedb94239ef714f9094
SSDEEP

12288:dgzW6gBEncrG1FHPqr72tL92DCldoTk3x9:dOnOrG1Fy+jMCldoe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7009fd341b1b351d97140f0641da43b_JaffaCakes118

Files

f7009fd341b1b351d97140f0641da43b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 409KB - Virtual size: 409KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ