419b9a39cf41d783e59d1fda5bac32f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

419b9a39cf41d783e59d1fda5bac32f7_JaffaCakes118
Size

4.9MB
MD5

419b9a39cf41d783e59d1fda5bac32f7
SHA1

23b46ce9a64a2911c7c768f2f6b742442140c607
SHA256

53d7276f31402ddde41ff50b8b8ae41605b8d272812297a5526830959e8fd8d5
SHA512

b0625d4a49d16d2370f3d293e6a9faab1fb9af5dea35ce9141f204612b26345296963fed9872e5cf698caacf38d94ad633b07ab0c936c8d3b32a748af8dc5f8c
SSDEEP

49152:FL/sFjBA8wkfH7+vvQncNldETgOM6LhqqSwtDyNXVVddR9gMM:F7sFW81fH7+vvlsm6TDAVVn4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
419b9a39cf41d783e59d1fda5bac32f7_JaffaCakes118

Files

419b9a39cf41d783e59d1fda5bac32f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 65KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 654KB - Virtual size: 654KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ