4477eed3439adaf9e2d309e5e1c7de69_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4477eed3439adaf9e2d309e5e1c7de69_JaffaCakes118
Size

349KB
MD5

4477eed3439adaf9e2d309e5e1c7de69
SHA1

16152a361fcece56e479fdc03d47e51dab0852c4
SHA256

97cd4a370b853df24893ad996fa116b8d190c5986bdb1c12bf3733c6d7a40879
SHA512

1955b506d686b26da1bcf6c8dfec6be49b137311442ae81919b85ad6974891e46286b2b84ae6d1011a35f11984482155640f8f1c14838abdf077381f3f90c010
SSDEEP

3072:DPQEkXm7Wk4vhKrkRl/wGBBaLr18dJkxApb/umlSI:DoTIW5JmkYW2rUma5tf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4477eed3439adaf9e2d309e5e1c7de69_JaffaCakes118

Files

4477eed3439adaf9e2d309e5e1c7de69_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 716B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 336KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE