9f0ac14623924c65b5c3cf70040a1110_JaffaCakes118 | Triage

Sharing

General

Target

9f0ac14623924c65b5c3cf70040a1110_JaffaCakes118
Size

1.2MB
MD5

9f0ac14623924c65b5c3cf70040a1110
SHA1

6bc62092d5f2779a3803c0a62326398eff052fc9
SHA256

a64a4f5384668fb7bd5de7f5224f09e3a75b4c6f7ef3f2320666e1e59af54f60
SHA512

ca5930f68737971bbc485f1dd98513ccf3d62e9cc319c212b1386494f62a5f5a75b19e771369bd8583555a9295e04eb36371db6a5e7c7d8d195925f0c4af1ecc
SSDEEP

24576:+zSqSkX9nbpWDA5QM9VGrRa0BVDLs4yKhzx6BOTUvbqDof:YSjkX5NlXwaaVDLF/oBOTUvbC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
9f0ac14623924c65b5c3cf70040a1110_JaffaCakes118

Files

9f0ac14623924c65b5c3cf70040a1110_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 934KB - Virtual size: 934KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ