4e4cfc0e4fa549c282391eb082580298_JaffaCakes118 | Triage

Sharing

General

Target

4e4cfc0e4fa549c282391eb082580298_JaffaCakes118
Size

361KB
MD5

4e4cfc0e4fa549c282391eb082580298
SHA1

2f9c4439c33e3de3553b2b4ca94574dee03275c6
SHA256

16353b60e79dc35f838b17f2b4dc580173383929d4118ae7f96934644deb601f
SHA512

31329f69ae1913ed2f72da39bf296821f3f23364e606be08e03dcf7abbdcc5f6081770914f21b1d18bb12e11bbccd0a1432e58d1d8ae9a9d32cb2df52c42dc54
SSDEEP

6144:WKNjUVUYRdTGZ2D6YmxXdL+R0jMRUkX2TE6Q1n8eO5V9DIiv9AsI6/sz3saojJIT:JaGAw2eYmxXsR2MRUg2wnOv9DILsokJ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e4cfc0e4fa549c282391eb082580298_JaffaCakes118

Files

4e4cfc0e4fa549c282391eb082580298_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\project\win32_component\xlbugreport\bin.vc7\XLBugReport.pdb

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wtq
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE