48467137e616457ebb61dd7053f2461f_JaffaCakes118 | Triage

Sharing

General

Target

48467137e616457ebb61dd7053f2461f_JaffaCakes118
Size

358KB
MD5

48467137e616457ebb61dd7053f2461f
SHA1

c77c1f36e842c2f529266a1c9f4d729de9756b4e
SHA256

31e8e2b2eb4f609350b61ee8bfe58a2043a2bb277ccb3639c747ee24b114dc29
SHA512

768cfcbc393b7f8012fc386840982395c95f797a0af660ae24f0db1c929a5be45a3be5b0aee0619a4982aa8596e9cdef4d612245870d2746bc0f8dce0847beb0
SSDEEP

6144:wRk8sxUHrJxMTXVCf9+iU252M/0VQHL3aLguegPPToa/sKf/BDdl35xe8Xej1NWC:wRkxxUH0VuV52M/zzaLgB8HEK3BDdl3I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
48467137e616457ebb61dd7053f2461f_JaffaCakes118

Files

48467137e616457ebb61dd7053f2461f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 245KB - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.newIID
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE