4306fb648c58e25bcf6bb4df0e314408_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4306fb648c58e25bcf6bb4df0e314408_JaffaCakes118
Size

194KB
MD5

4306fb648c58e25bcf6bb4df0e314408
SHA1

16f0d31f8ae90fe6c9ea5e5c087fe0549a482b7a
SHA256

e8ebe4b87bb7dbc6c67ed78f5f07920cbe3e7521ea2b4acdc7c7c2d17dc22795
SHA512

e649f520797dd8b8744a5e89efedb1c53c2399b13338cab0f2422fff21ef8e1513ce865ff537a4373a6cb2523c2e46df850cc9152bdc12cf76dbe3081d106be2
SSDEEP

3072:HUthZ45uqOQtA5Grj3+PxZtubmpy0BjoHzn1zaPEHYl4g6rpI8:HUxUtUGrz+pZobmI0BjOhGcHYh03

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4306fb648c58e25bcf6bb4df0e314408_JaffaCakes118

Files

4306fb648c58e25bcf6bb4df0e314408_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 619B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 34B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ