4708581d63cfa26f1a25b38d0e797527_JaffaCakes118 | Triage

Sharing

General

Target

4708581d63cfa26f1a25b38d0e797527_JaffaCakes118
Size

1.7MB
MD5

4708581d63cfa26f1a25b38d0e797527
SHA1

47ad323f95835b5e5ed265e7f3968335b3177ace
SHA256

7c17e92dc9894c0636c654adbf5d7ec5ebff74ca8cc244bcdd4ea8eb13ec4ade
SHA512

9c06995920a273c76e13aa6e4184f9e1ef702db9b0c36bad21859e4d9772f5d5407d2b4203ba91aefa5571e494fa10d5a1fee2b1b5b63f97b145914293ae58a0
SSDEEP

24576:t/kASBQY7Trw3aMuAGpXopsscG23Eg6WXqYoXW/AZMUSj3uVfOc9QgQK:tsAKTEq+GNWBiEg6ikMLOW3gQK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4708581d63cfa26f1a25b38d0e797527_JaffaCakes118

Files

4708581d63cfa26f1a25b38d0e797527_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 662KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ