409b49dc4ae492ab64c8ab5defd88a15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

409b49dc4ae492ab64c8ab5defd88a15_JaffaCakes118
Size

1009KB
MD5

409b49dc4ae492ab64c8ab5defd88a15
SHA1

cc584eddb6faa20c6884f54323663ca32dacf5b4
SHA256

3541f3143088e5c361d6100bd4c55d95c4eccd45eab24cdc5bc544467a53cee4
SHA512

3b995d344da0daac528c6737d205fcb63831b52edeca1140eb69b883ea7eb129c85139befc8935a02a2399f5bd617469faac8db36ac240b262d4fc5684369185
SSDEEP

24576:x1zqTge8VOt5HB942ZcSr+F7CxhXELZkUi6D/jD3rYK:x1zqv8VOHQ2y0yJZPi6Tbv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
409b49dc4ae492ab64c8ab5defd88a15_JaffaCakes118

Files

409b49dc4ae492ab64c8ab5defd88a15_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 4KB - Virtual size: 888KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 653.0MB

.lrlcir
Size: 984KB - Virtual size: 988KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ