f9cf26aba3d11096de64280b95bbc76c_JaffaCakes118 | Triage

Sharing

General

Target

f9cf26aba3d11096de64280b95bbc76c_JaffaCakes118
Size

497KB
MD5

f9cf26aba3d11096de64280b95bbc76c
SHA1

5370a1631fa5db1bb8b180a61bc4e9701d35cd12
SHA256

c44aa490d00ee16356f7911b4700df51cd526aa2029ba5a738b952697906d642
SHA512

9214770141654497a6604753a4f50e1b0c89cadf7a59298821e36e6c94da2b29b69c959f01abfd419afafbdfddb666d18ea685ab741474562bb7aa1d05995dea
SSDEEP

6144:0rrqvJ5nVggvxvwYjsr8gRBM5HW6y80IP3cn7L9SWNm1+QdZmp0wZrIN/0UazKl:MmvJ5nVgc6MNW6McWq+wmPZrosUazg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9cf26aba3d11096de64280b95bbc76c_JaffaCakes118

Files

f9cf26aba3d11096de64280b95bbc76c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 418KB - Virtual size: 417KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ