09128eb047f687e320f9563dfd6a044c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09128eb047f687e320f9563dfd6a044c_JaffaCakes118
Size

535KB
MD5

09128eb047f687e320f9563dfd6a044c
SHA1

7c09c98ff235efd2a031f8f98bfcc7a899264f0e
SHA256

63e24071d9aeb2096b8e591bf83c2d277b0d0008bc477e98f3512e4d1cb3a59d
SHA512

a806f73366248342c64257b4f471900e0ea16117750f5e9813e35ea8a99bb1c825ba98c36bfc328a0f5773e190bab6de93666ddbd56b7ef6d91491045bf17ac9
SSDEEP

6144:W9z6hQvwfxPruPOj6YJC1LfmOdoa577+F3pq1qZIgpPbUL997yhtOmen+zDuet2M:NYiVrMG6hZqjxpPdtjG+PD2Raoez/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09128eb047f687e320f9563dfd6a044c_JaffaCakes118

Files

09128eb047f687e320f9563dfd6a044c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 438KB - Virtual size: 438KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ