f9f1dd1808b8740bfc3ed4399bf2fdad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9f1dd1808b8740bfc3ed4399bf2fdad_JaffaCakes118
Size

771KB
MD5

f9f1dd1808b8740bfc3ed4399bf2fdad
SHA1

cf3af1115fbf0232375ab5ea9dd6af8679c12419
SHA256

2dd0a3f778fa8a8e4943ac15023d16d99105791b22b3086bb6c64f27a0723e75
SHA512

b2395e8dd48265084a57045c4ad73eb84810d2cd9cfb7aa8aec12b65a88032fc79654f78f6c44cf7259805b67869e9f9576d0aae68cb4b30d6fa4d3761a78cda
SSDEEP

12288:+lYPs6/oqTml9WnRvJ2mYhxmldSbMS5SC4ANOLNhxjmBsOm1mGcC:+X6/oJvR2SbzS5AMLzxqBSc/C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9f1dd1808b8740bfc3ed4399bf2fdad_JaffaCakes118

Files

f9f1dd1808b8740bfc3ed4399bf2fdad_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 501KB - Virtual size: 501KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ