403dfadc09479ecdab8d3fd8c2e2876a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

403dfadc09479ecdab8d3fd8c2e2876a_JaffaCakes118
Size

972KB
MD5

403dfadc09479ecdab8d3fd8c2e2876a
SHA1

457f60797b332123e08cd1e90d0e53858f05fadd
SHA256

bc1d9fd0a85a47ced6f051738aa4a7afaff07b51fea30b6e4da2e355a3a9dbfb
SHA512

3e4326137ad568f992066dc40ee43b0710cfcee738df6cdd2e00220dd50e2d148147f7db422b9b1f6066367c618cde0bde1919c010ddffcb9ed7e7c9b9f50b2f
SSDEEP

24576:NWX+qPJCar7nYGqg4SiRslp3mc/DSIhl/5JLwXfeL:KJJHraslp32Ihh5yPm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
403dfadc09479ecdab8d3fd8c2e2876a_JaffaCakes118

Files

403dfadc09479ecdab8d3fd8c2e2876a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 408KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

XX2
Size: 548KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE