f44e626ac9a4caa2a120ebd669d05e52_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f44e626ac9a4caa2a120ebd669d05e52_JaffaCakes118
Size

319KB
MD5

f44e626ac9a4caa2a120ebd669d05e52
SHA1

34f030c1c78b32921b663318e9927f075b642d69
SHA256

43c7f8461837aea17713cb176ec2584cba552e0f7aef64a67d55e0fde62d82bf
SHA512

fe7f7f0f10a6685b4d55b98b563b1076d5d95ed967886db83ae87bdc55aac3c1f5340d9106aa1865795551481f7ee05604b184637caccc0727b51a81bfa682d6
SSDEEP

6144:J+Xz9nxsIN5WoVpqgUf/CAB5gdzFMR9tasI:SBxsIFVggUnLP4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f44e626ac9a4caa2a120ebd669d05e52_JaffaCakes118

Files

f44e626ac9a4caa2a120ebd669d05e52_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 274KB - Virtual size: 274KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ