f48879a443b885f6d7f7b587f6a6f2c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f48879a443b885f6d7f7b587f6a6f2c5_JaffaCakes118
Size

228KB
MD5

f48879a443b885f6d7f7b587f6a6f2c5
SHA1

273f5f5f0c92638ee7bf145dc510d9b07a443ee3
SHA256

34f66daf6b51dcefb9b42c4b6532be811808702e3eb2f4a00ad43b3b2e429fce
SHA512

5ab1b11a3d2a65203748a745b21904ca95f8fe4b3e602725150952ce0115b9bf33d35f86952c169bbd6ff08120196078fa104f2040529a24e80111c5973feefc
SSDEEP

6144:p5x1dG3SuVUf3wB0Xslof8UAzi3LX2u7yDcN+A:7xzTuVgABpUAzKX2UGM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f48879a443b885f6d7f7b587f6a6f2c5_JaffaCakes118

Files

f48879a443b885f6d7f7b587f6a6f2c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.re3oc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ