4326e6795a58e4c76527ed18d271b48c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4326e6795a58e4c76527ed18d271b48c_JaffaCakes118
Size

1.4MB
MD5

4326e6795a58e4c76527ed18d271b48c
SHA1

56a9da628cac8de34e75be7f4b00ccbf7a9652a1
SHA256

8a6a596887f8851bcd9fe03b80c207c82d672b89031434ce269c641eb7326ee6
SHA512

bf418fae3baddccea4636ffdb282b1547dc1d3d4c73fa07777af7bbce2702a4ca9b4034bc730b0db25ce2570b3d0a6f7a1b00aeab55ed78bb1c350f49523f078
SSDEEP

24576:jZy4iEYyu0URwH9xzByzZX7DK22NJupp12LA17nHIGpWtFbOyOz:NyaZfzByBDwMUco/tlOyO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4326e6795a58e4c76527ed18d271b48c_JaffaCakes118

Files

4326e6795a58e4c76527ed18d271b48c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 522KB - Virtual size: 521KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 862KB - Virtual size: 862KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ