f9915a4fbe606b6bb71ce2470c69342c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9915a4fbe606b6bb71ce2470c69342c_JaffaCakes118
Size

31KB
MD5

f9915a4fbe606b6bb71ce2470c69342c
SHA1

708d92a8399c861f9ac9c9888ce785b99dc09802
SHA256

ca8209278ea7693cc2fe34b3d4a2bd3bd4bbf7aaf1847d3128107d9bb7fd29b1
SHA512

5d2143adaf83e5db42646243bbd1ae81fd3a528c9ebaa943ede8c17963282f9936a54415041ed6ff9ee8ce6f1c772b414a37952c116103ebee7f0babba6f5859
SSDEEP

768:wet2dEf51gvzRLJ4OeJSvLDccngwITBDQVT6t7txPp:72dagvzR15LIXwkDH/Pp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9915a4fbe606b6bb71ce2470c69342c_JaffaCakes118

Files

f9915a4fbe606b6bb71ce2470c69342c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ