3a9920e10846086010dbc9a238f01d23_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a9920e10846086010dbc9a238f01d23_JaffaCakes118
Size

478KB
MD5

3a9920e10846086010dbc9a238f01d23
SHA1

b7900c4f7d197af736bd2a4af5312405f19dc91d
SHA256

c7cd76959124b3f290282b73ebefccb61c5302b083098865998d41b6d0e23e67
SHA512

18c7859ccf2dc53124ea361eaf0ff15cfcd8e278307fd23e7c965b70c57b76101061d923cf9bf177b16f3bb9d4d36b49d941a425cf38417b465c7dafe19c43b5
SSDEEP

12288:NoSxNzL/375apU/N4kOUGc43S8vnFRcoxAHK8rpap:NTzfb14/U/4CcFNxAfVQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a9920e10846086010dbc9a238f01d23_JaffaCakes118

Files

3a9920e10846086010dbc9a238f01d23_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 449KB - Virtual size: 449KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

yC
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE