4433b9a682eb67bdc9182794ae59daf6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4433b9a682eb67bdc9182794ae59daf6_JaffaCakes118
Size

118KB
MD5

4433b9a682eb67bdc9182794ae59daf6
SHA1

19b7678a936042fba660de8625b5be09a3183e6a
SHA256

b54bccdc45307ff696c6fee80e8faef204162e16f12a497720ce4afc77699983
SHA512

f3c1c40f095bd09b11b38151337b81e99cf672ae8bc5d31a71c7d9256d6735c87b39a2e1de2fc1b09833c4ad83ca71915056ac1bde979cf088ac5253fc75d420
SSDEEP

768:DxI+IxIxIxIp+7HBAv9ksUYcIyIsLbYaJu+Zci69Up:bSB5s9n4dZT6y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4433b9a682eb67bdc9182794ae59daf6_JaffaCakes118

Files

4433b9a682eb67bdc9182794ae59daf6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_SYSTEM
IMAGE_FILE_UP_SYSTEM_ONLY
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.scpack
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.newIID
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE