4726e5041c28e445d450cf7218dee821_JaffaCakes118 | Triage

Sharing

General

Target

4726e5041c28e445d450cf7218dee821_JaffaCakes118
Size

321KB
MD5

4726e5041c28e445d450cf7218dee821
SHA1

1d5c5ed143e77ebae9d4db33b56cbbce381c949e
SHA256

20023dacc26f567112cc8214bcc1b696d7de655724f982e51e5738c34b537f8b
SHA512

a69c1befec07af49532059e3ec673ad838e090075087de07a0253fb6fa71307d9c816caa4f79fdd8f68d79cc1c8b7d39ef6efcc7b21e38f777c6e033b2fb93c4
SSDEEP

6144:mwWgb0s7Gj67WzuczxqxFSRAxT81b/MWAi7sqhr9MFgbOysOGkJ3r:mtgLBWZzxaRebEKr6qbOmGkJ3r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4726e5041c28e445d450cf7218dee821_JaffaCakes118

Files

4726e5041c28e445d450cf7218dee821_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

R:\TempView\Output\BinFinal\TXPlatform.pdb

Sections

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.jgd
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE