04a3b0b469d6913e3615425ba5e3c1cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04a3b0b469d6913e3615425ba5e3c1cb_JaffaCakes118
Size

100KB
MD5

04a3b0b469d6913e3615425ba5e3c1cb
SHA1

467330cad4f61c3a1b116da9fec2988bfe49391e
SHA256

b96a0ec5959a0ffccb8d3129ff866dbbc5491f2be7beb9c989b2b7f9675347d9
SHA512

2053015bdc976249cc8c48b46fea054e277b263e337f642548467273ae66926f86dac40ad9ba929ae91f6e26c8b0d7c9145c511dcb2ebc90a60e580b45f5735d
SSDEEP

3072:AwMnK/6JS5pkqG3PlXo09L+snKJiZd0G0UUPZ:AjnK/MUpolXoELdnKJed0GFUPZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04a3b0b469d6913e3615425ba5e3c1cb_JaffaCakes118

Files

04a3b0b469d6913e3615425ba5e3c1cb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 898KB - Virtual size: 898KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ