09eb591957fb7092393f8b6b12b1fd01_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09eb591957fb7092393f8b6b12b1fd01_JaffaCakes118
Size

59KB
MD5

09eb591957fb7092393f8b6b12b1fd01
SHA1

e7c795eea13f559059c834077a01e6822644d6b2
SHA256

cf4e93c9079fbd5be6dd2cffa18ba8b35c2285b6e40c8144e674ea94e47ab9e5
SHA512

6cdb9613900ae135f8430a3db0f19f4ec4f698adcc9fc9d354222beea4484f501e1e2ef1a690c97d090803dada4ae2532dc1c676dee9b1a38f63cb115966b880
SSDEEP

768:YOcMqeRVszjRG1zBmWFMwBkKHhoeSn0MONtqe0VszW6Ilk8RyRvaiQnBjr6Y:jlqwVs3ApBmWFVBkWugfqhVsgjviY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09eb591957fb7092393f8b6b12b1fd01_JaffaCakes118

Files

09eb591957fb7092393f8b6b12b1fd01_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ