0a9c7e999e3e5a29b841791fbe0fe2a3_JaffaCakes118 | Triage

Sharing

General

Target

0a9c7e999e3e5a29b841791fbe0fe2a3_JaffaCakes118
Size

3.2MB
MD5

0a9c7e999e3e5a29b841791fbe0fe2a3
SHA1

371c27819f3f429b87f2790d721fb43ccf8ebeed
SHA256

d2aa61d3976c6d4929405f160b7ef6d636a9caaa588da79a09440e4ccc33653f
SHA512

8e12ed07e54b64862965e43cd60cd3ac323abf6860bd7f5db3c755976a678bd309db8c6b0de10372b6167543186cbc380745de6ea6af7f74cf5571f92ec60d9f
SSDEEP

98304:To+8ph3ufOYP/AAYfcNli9zuFB8Hcbqyu1:f8pBufOq/cd9zuF5tu1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a9c7e999e3e5a29b841791fbe0fe2a3_JaffaCakes118

Files

0a9c7e999e3e5a29b841791fbe0fe2a3_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ