4a786e9f3604f3393217647b4f23d38a_JaffaCakes118 | Triage

Sharing

General

Target

4a786e9f3604f3393217647b4f23d38a_JaffaCakes118
Size

2.8MB
MD5

4a786e9f3604f3393217647b4f23d38a
SHA1

1f1d148ec4e86b80342b5321e33c3b69ca73f44b
SHA256

dbfa3890c5e639a35773c51e745ed494c3b9aa1d5b9f3db017d301a07ef62f6b
SHA512

e27d829ea42fcc71c37e60527f99f614190f359b0fcd0bb2699fe8fbe8cc3cdfb8759d73be9c2ffe8136589bc467803e5b3d3624d603ea945ab51da893859e21
SSDEEP

49152:6obQnAcfHSeYvUjBOIGnzVUsAsEUDvq+shmLKxGqs8DGkUlKUpHdDAyKc:6obZf1UluU0PSZhmuxdsNKCDA+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a786e9f3604f3393217647b4f23d38a_JaffaCakes118

Files

4a786e9f3604f3393217647b4f23d38a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Esp0
Size: - Virtual size: 3.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Esp1
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Esp
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE