4457d8ae6640df4b02278306373c2ccb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4457d8ae6640df4b02278306373c2ccb_JaffaCakes118
Size

2.1MB
MD5

4457d8ae6640df4b02278306373c2ccb
SHA1

ba7fc2a4ce877425eae0a050122f37db56b4e3a5
SHA256

2d71bfcfa6cae2d596a7ab1e75262c3846cbcdd91b8d4b7d84d27b370e3b5928
SHA512

562bfd665631a6d5f192410c5938940801447000072e748ae50d91986ba32092f959f80acd2fc40fec6dfc32dfc212e44df4c5b820f17a3c0b8a1e510a6e9cc9
SSDEEP

49152:P3oXkpUnsngb+E6qI733tHU3diUnAomX/:P3JpUnsgb+P1UPnY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4457d8ae6640df4b02278306373c2ccb_JaffaCakes118

Files

4457d8ae6640df4b02278306373c2ccb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ