446de6cc3d18fbf2a9acf92547ca2947_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

446de6cc3d18fbf2a9acf92547ca2947_JaffaCakes118
Size

2.3MB
MD5

446de6cc3d18fbf2a9acf92547ca2947
SHA1

ebbb9bf750708114961d18dd90b9a9392ef1f374
SHA256

c85c4934c0071b8f1a2c3b41308901438f9b37ca822fa929134cfa5ecedb364c
SHA512

d3131c9dc87774822866b578ed95af6bd913ee5d172082e7266a04300e1b8c5641d944b0dd7744973c4c9dd9c5e1286ceb358104110b9abb5514d8f210751a02
SSDEEP

24576:TY/aKjXW/ASbMEeTMSYEhzlQNuTrWAJ2sqEWTPurOehs5XlMPVW1XMIv8m9CW3m9:EkeTXBT/WC2sqLTG1M1MP81c4nn+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
446de6cc3d18fbf2a9acf92547ca2947_JaffaCakes118

Files

446de6cc3d18fbf2a9acf92547ca2947_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 33KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ