f9ea836a4c8f5c701e863d6ed7faebb9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9ea836a4c8f5c701e863d6ed7faebb9_JaffaCakes118
Size

252KB
MD5

f9ea836a4c8f5c701e863d6ed7faebb9
SHA1

9170c6aaa4fa6be96dc3edb782b3b4b822ce1389
SHA256

947bf35c2868c2176b0e658ca351551de6a015a7ece304a20d056d533f18a3d6
SHA512

ae267e1023d8e9510fea41024c6f9c60c048436b691d09cf4b34fa248cb3e670fd20630dc46c11ad1dc352d14386855a6136467378ccfebc87748c21a7ea6be8
SSDEEP

3072:85E3wtneOI5PKuGqLghSjH3hocPJrbNFdJGAPxqVapvddddoLN2aI+qSZOn3V:AwwteOY6hwRoQJTPxqVoiN5IrIul

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9ea836a4c8f5c701e863d6ed7faebb9_JaffaCakes118

Files

f9ea836a4c8f5c701e863d6ed7faebb9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ