04fd6a7cf90de903ad5c001fc71980f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04fd6a7cf90de903ad5c001fc71980f4_JaffaCakes118
Size

1.8MB
MD5

04fd6a7cf90de903ad5c001fc71980f4
SHA1

7dc8376c0620aff752b812f792c81e7ffcc22656
SHA256

cf3a1b5abdf609335771bfc9988101a331cefa0a2b6eaa9bb42025f95a76643d
SHA512

e51702a69398b64643859ff43f16281de8a80cd2c9467683b8f0bc596d6238340e373b2ce0f8c2620e3c5168a4190d5475ce60563ec0bff9902546f52506df9d
SSDEEP

49152:v26s/w8i9LDywC/hAX+IM7agumxXueNZlraV:u6s/w88LDK/WX+rJr0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04fd6a7cf90de903ad5c001fc71980f4_JaffaCakes118

Files

04fd6a7cf90de903ad5c001fc71980f4_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ