f4a04dfe6c6598d09e37e0aa9d372003_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4a04dfe6c6598d09e37e0aa9d372003_JaffaCakes118
Size

200KB
MD5

f4a04dfe6c6598d09e37e0aa9d372003
SHA1

fb23f3bfb585c2759257fbd5298b60bc235e035d
SHA256

ecb5a72926bae1b1d7d9da0dee16104fb1362ae5d94fe907bdc0dfab40bba6d7
SHA512

4252acc9bea520dbacf17de004be6098014062db53be3f9bd903a87921dfb3c8e5afae3610da7fbe495a1878712a0a05a1601f5ebd76465498c08364e9389af5
SSDEEP

6144:Qhn2zai7RmypiYVWUimymGM//acK6YlqvWu53:wnni7RmypRQBBJC53

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4a04dfe6c6598d09e37e0aa9d372003_JaffaCakes118

Files

f4a04dfe6c6598d09e37e0aa9d372003_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 89KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ