0480d27c57bfb7742a18df0d91aa3d85_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0480d27c57bfb7742a18df0d91aa3d85_JaffaCakes118
Size

470KB
MD5

0480d27c57bfb7742a18df0d91aa3d85
SHA1

6230d26b9458ece7baddd9a97ff0fbeb94984494
SHA256

30474198776663b16ec16f1f2ca7afcd1d77af90a572b4928b5850a1874b3124
SHA512

a93e2f9502368228877382943ad0ee9b9b6e0fc59dc9cc28561d1acc6d244cf852af413c7349e4adc8da59fe2ad881a6bfd8e21a94ca14a51600d7f635f30188
SSDEEP

6144:HuYChGQLCJupT+HMkihKzryTasyLOAKI6vNCVQdYSD7gPWQay5zDuoY+PERRSmK5:OYC5CEAMJKi5VB+kQa+DYQERRSmK5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0480d27c57bfb7742a18df0d91aa3d85_JaffaCakes118

Files

0480d27c57bfb7742a18df0d91aa3d85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.8MB - Virtual size: 7.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ