f4f08150a94c6333dc0acbc5cdeea1a5_JaffaCakes118 | Triage

Sharing

General

Target

f4f08150a94c6333dc0acbc5cdeea1a5_JaffaCakes118
Size

385KB
MD5

f4f08150a94c6333dc0acbc5cdeea1a5
SHA1

5bfeb461415720da5bf996f9a3270852e1281f4c
SHA256

7b9c76c111ca5352c87297376722200a5ff15f643a91565976a5262be4b32bd0
SHA512

6fe059885e2a657de36f5c9d50847e16c20c240b7e596a778592d107fc923d7c2bf4cd6effb146ff5eef9dc99ba5d15051963d44d557b773c06a806819af4065
SSDEEP

6144:zhF9gUzjmJS43cZYbFtUk+KmWmyzrhbxD/qjBAynSBP8EINFajYRedqQuHuiFTdi:zdb+JZcWrhbJqaMdfs9BApJSnB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4f08150a94c6333dc0acbc5cdeea1a5_JaffaCakes118

Files

f4f08150a94c6333dc0acbc5cdeea1a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ