4390872d179c704717e16f0c5c95aa14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4390872d179c704717e16f0c5c95aa14_JaffaCakes118
Size

533KB
MD5

4390872d179c704717e16f0c5c95aa14
SHA1

ffa28b76c185a8065d8752d22e7ed87a3f72156b
SHA256

8c5acc90c7a89f4291ad9db42f20a58f3c8093f196904f84104aac815e2c7d5b
SHA512

785f0d2bd5bc0637e4751967adc35ebd8b9b2b229628125806e885f7c96a746c9ebde9ff5b3893e91862b6f3dba9fd46ca8b06135a2b89f13fb6ab0bd3a30a18
SSDEEP

6144:nChlah6XD+0VDPC7gDYkTwmbrhooa9YfAerSyGAbZHAbgGV/4/VkGlDw+B/fvnjq:x6XD7VmEDrJtrovG/VPlfL14P7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4390872d179c704717e16f0c5c95aa14_JaffaCakes118

Files

4390872d179c704717e16f0c5c95aa14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 430KB - Virtual size: 429KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 10KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ