04148bfa6d7a6560a1b17571f54a6875_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04148bfa6d7a6560a1b17571f54a6875_JaffaCakes118
Size

1.5MB
MD5

04148bfa6d7a6560a1b17571f54a6875
SHA1

b69a0421efa422ee58916f5a23878cc8315b2e70
SHA256

5b245e2eb2e8c1bc8e5f98235740e501acb8f981e4d4fc636607804f33008fee
SHA512

2b737a839fd09a8baea125c94c2d97c92b68da8e8b380a72eb1509f2188880954306045c7888c01187f061b304509ea77a53d823b66be0ac7b46c67dad588c9b
SSDEEP

24576:wfdMzV32VkUMROuseISnkpP+1Ej+pH8iSIF6Uyo+1z+PoMj3SyKo:cMkVZM1mSSP+1jCrd+PoMj35

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04148bfa6d7a6560a1b17571f54a6875_JaffaCakes118

Files

04148bfa6d7a6560a1b17571f54a6875_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1003KB - Virtual size: 1002KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 230KB - Virtual size: 230KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ