48f4632a7f7eb2029e1d8d04cb89f2e7_JaffaCakes118 | Triage

Sharing

General

Target

48f4632a7f7eb2029e1d8d04cb89f2e7_JaffaCakes118
Size

261KB
MD5

48f4632a7f7eb2029e1d8d04cb89f2e7
SHA1

fb526e4a71e958779c18072ee27588b27c2c1895
SHA256

13e4573fe5f11ddf8114988a3e251aa377c8b4111e5279f4ea481eab5bda8e4c
SHA512

0d5f79e631b2b3855a6f42f413c1aaaaf991292f9c21f40f983d7b25e7a521b7ecc485a8d0ec82927b2aeaa40587818ed044e6b422a2f5a62caa8e80340c9aa4
SSDEEP

3072:CcOzKd5FqQ+A7OKpzgxLny/Ek48hThp9SgLLSpo8Q9cny2tAqihy0wlmmQ/r9rkT:W817JLS7A91kmX/2Rc+yYixKBQXaSQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48f4632a7f7eb2029e1d8d04cb89f2e7_JaffaCakes118

Files

48f4632a7f7eb2029e1d8d04cb89f2e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

PINTLPHR.pdb

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.spm
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE