JaffaCakes118_9ecd59153b34c4ca6e747195517eda85 | Triage

Sharing

General

Target

JaffaCakes118_9ecd59153b34c4ca6e747195517eda85
Size

343KB
MD5

9ecd59153b34c4ca6e747195517eda85
SHA1

019235b6b829407812530e9428957557e83b2a3d
SHA256

6c04519c9b58df1d176d21e5bb13bcddde60938efb240e9d67c4fa38b1c2f0e5
SHA512

bfb65f0e829cc4388e4ee81aa6859ae46fa4db24daaf38a7e8fd237be6d69b30f8ba27d6b732473df3a2e0d036c581518e5a01cd33dda7ac22939fb3be919050
SSDEEP

6144:HqJ7wdeMUZ5NlMSE8H+YZhOlRrUT1AfK/i1Mh5HJ/CEcYNOP0EbpkcDOEP4h5FMv:rdeMUZ5NlMSE8H+YZhOXwAi/i1MhNZNq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_9ecd59153b34c4ca6e747195517eda85

Files

JaffaCakes118_9ecd59153b34c4ca6e747195517eda85
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 249KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE