04a9a4626d18348d7cdd686d2b19f179_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04a9a4626d18348d7cdd686d2b19f179_JaffaCakes118
Size

55KB
MD5

04a9a4626d18348d7cdd686d2b19f179
SHA1

86642050ca906a180ee22f57b0bd82468793b13b
SHA256

045c666ae31bd1713616df333bce14c63162b1e72c03a58ede17820bb36da524
SHA512

cac05f35bd9f7bcf67139e7355c04643bb9aea7ebc0d4da1b095814f48b16601d4b5e6f06a797559229df27c5ebcee4e29798e4808d098f86abcb5f0d28254a1
SSDEEP

768:pPgGp5GpQT7q3Hbc4ONwDCZ+MWNQZEAF01CMTJLLK9Z:pPgGTn+Hbc4a8G+0MVK9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04a9a4626d18348d7cdd686d2b19f179_JaffaCakes118

Files

04a9a4626d18348d7cdd686d2b19f179_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af25399888749ebc4535d750bfc41908

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

vb40032

ord616
ord617
ord618
ord619
ord632
ord631
ord100
ord187
ord189
ord188
ord186
ord190
ord199
ord519
ord527
ord523
ord521
ord530
ord537
ord533
ord581
ord594
ord593
ord595
ord598
ord596
ord612

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ