04b5944e94cc1f7806fa3042761cb7d4_JaffaCakes118 | Triage

Sharing

General

Target

04b5944e94cc1f7806fa3042761cb7d4_JaffaCakes118
Size

259KB
MD5

04b5944e94cc1f7806fa3042761cb7d4
SHA1

0489a0e557a78e8667ba45c2eae356dabb0d46d2
SHA256

69b155f9805c8d7be9d27bec44417b8c2c50df02957293fe0cb606215a53ca3b
SHA512

b48408abb33417103b040437218c10af5b7c0e028d10009b705ade095636953cf926cfebbc1984723e5d10cd925ce821dd1f40ea8eaff5863f92605e7319f3a4
SSDEEP

6144:ClosRv2GJUdyX8losRDuj/BMgqRfXX6Ux7nOpV:ClosRv2GJl8losRDuj/CPRfb7Or

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04b5944e94cc1f7806fa3042761cb7d4_JaffaCakes118

Files

04b5944e94cc1f7806fa3042761cb7d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 831B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rol
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE