4121abc4fac89604144c0338f899a66a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4121abc4fac89604144c0338f899a66a_JaffaCakes118
Size

55KB
MD5

4121abc4fac89604144c0338f899a66a
SHA1

7e9e43f8ed862321b4a71ddf6aa1e6c57938f8b6
SHA256

02432947fedb372d9aeaef86a9de7fba4147f7811a2b6a9aa992bd280257475b
SHA512

4c97ac2b478f3d68d22a65e08e5fbd5541344c61de2e82afa95d0c0b4b0aabfdd921be1a3cdb1197dabfaee4b35b469c1e52e92ab01eff9bf45b75b31841d54b
SSDEEP

768:FJpwGU2z1qpPRTBEjKJGuBsN1w0pWUqb/e8n+RNYXnyRYzXyUYw2uc8UPw9tyII8:pqpP8jKxmDw0IG5RKXyRY7xY/ukM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4121abc4fac89604144c0338f899a66a_JaffaCakes118

Files

4121abc4fac89604144c0338f899a66a_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 210B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ximera
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nah
Size: 1024B - Virtual size: 769B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

13f2
Size: 121B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ