f9c9f65899c6ff00b44d4ad9a14b8d75_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9c9f65899c6ff00b44d4ad9a14b8d75_JaffaCakes118
Size

378KB
MD5

f9c9f65899c6ff00b44d4ad9a14b8d75
SHA1

0f950fb7651fdcc2b541583791d5b3de8cb6f68f
SHA256

49d3e907c3150d42018d3748fe0e0c1919b056d176223a564ed7793a5c9d5ff0
SHA512

6e06caa170d94163d0f048ef645b3778330f4858f422e3ac2b6379ad1780a9548f0bbae625f9e74fb5b9e094d8475d31bf109fe4fd04268f610b394cd6670b66
SSDEEP

6144:JlYDpZR9gBkxQJx5oI2bx8rgBupJpfhpJiwru0Djkl2wlYmF6uPazXOPSLl:vYFZRmBkeJx5hyBSFpJvU3l2uPM4Sp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9c9f65899c6ff00b44d4ad9a14b8d75_JaffaCakes118

Files

f9c9f65899c6ff00b44d4ad9a14b8d75_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 319KB - Virtual size: 319KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ