4711b224875cdb58dad4b855d5b7613d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4711b224875cdb58dad4b855d5b7613d_JaffaCakes118
Size

617KB
MD5

4711b224875cdb58dad4b855d5b7613d
SHA1

34bfb89c0aff15d196b0687ca4a4f45d22e27688
SHA256

1bf59cd7bcc58bcbc624a756d674915079593b420a64ce76f3b241c0e1262885
SHA512

6d76e92b284a5c1e668b8a84a7449049c930def677114f198b7145aa7b4e179fef8deee246886c7a675fe9f7f73cf8f0a674de6f85370a2e2fde3779973a5cce
SSDEEP

6144:oAKyZmLl7iE03XgioxA7uHCHwBvu3kZPvc2eGnT3joUPozMpZaUdk6Ze18T:7KfiP3XgtA7KVB22k25mzYZaokR18

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4711b224875cdb58dad4b855d5b7613d_JaffaCakes118

Files

4711b224875cdb58dad4b855d5b7613d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.bss
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: 389KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 211KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE