4cd8f7c88424432c9c94d22b5cba129b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cd8f7c88424432c9c94d22b5cba129b_JaffaCakes118
Size

441KB
MD5

4cd8f7c88424432c9c94d22b5cba129b
SHA1

77cd976cd6e866edb47ca56a8536aeb34f3715b5
SHA256

e1a9e70a602a2e4fb0ef624173987be6bc9a45a36aed509d9ff74e646daecbee
SHA512

7073b3252c089235d3036a9bf503d4663b3025dd94db953c8090b0f58d740d2aee7a03420a600df56196c4edd4cd037715ac67d1872d217fff0a44532fba9540
SSDEEP

6144:wJYdxEyoLWLlsGJeaNNmNdfay07K/v/O2yjLZRgY/wOdeVvl82bo7lZk+Sl:1dxED8lsGJ/WBMOPcjLfeVW2bOXk+4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cd8f7c88424432c9c94d22b5cba129b_JaffaCakes118

Files

4cd8f7c88424432c9c94d22b5cba129b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 370KB - Virtual size: 370KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ