4adbfbb72e49b10b1218db41568f15c7_JaffaCakes118 | Triage

Sharing

General

Target

4adbfbb72e49b10b1218db41568f15c7_JaffaCakes118
Size

969KB
MD5

4adbfbb72e49b10b1218db41568f15c7
SHA1

1582c459a9a3429c1d59d6b6c8e703e5499c92ec
SHA256

f97b051a72d6243fdc053b92d0bdcb3f27a3acd5be0a4a83df07a3d17a2ffdf9
SHA512

3d843e807d34d21a9e4c604564e151545afb2ce168829ceb0cf414b5c29939c5c3a926809fcb0d2e39bda0396673a9716a07ab85ed918ca8710efe94b8a909db
SSDEEP

12288:v9+UFSbzwd6xyFjH8H1NDNCqovrO4LM29Y7NZ/FDFq3I8BFQyJXvrxjT2/pQWDX6:F+pbzwIxk4VdoqmGZbFqzFQ2vsxq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
4adbfbb72e49b10b1218db41568f15c7_JaffaCakes118

Files

4adbfbb72e49b10b1218db41568f15c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 392KB - Virtual size: 391KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 433KB - Virtual size: 432KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ