ac4a08f756216de41b0364bf62b44f82_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac4a08f756216de41b0364bf62b44f82_JaffaCakes118
Size

874KB
MD5

ac4a08f756216de41b0364bf62b44f82
SHA1

aee730297dd1a1700bbf5ee4b10df790e267b2a3
SHA256

53f4320945ce77a43d8cec88ee3ae817573bac4e33189d47043238b23aa77fbf
SHA512

1973ac1707d93110a21427a46e2c8c579f5c8fa9c509a401a2f6f676f640f1b49eaa8ac0e14bca5cb8e6981064ac6931fe04b0e78799e58720c6b1e619f689f1
SSDEEP

12288:1LJmPlzSnSXGbFFYd7PfxmbKHBkTTkW5Bdhn4ltH80xjxkxQuZwEjFTa1gG1+QjC:mPRwUdF0akfkYh4lW0xjWJhotjyN0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac4a08f756216de41b0364bf62b44f82_JaffaCakes118

Files

ac4a08f756216de41b0364bf62b44f82_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 510KB - Virtual size: 509KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 512B - Virtual size: 390B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 233KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 61B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ