44acdfa6ac173129ca6538a6a81f20b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44acdfa6ac173129ca6538a6a81f20b3_JaffaCakes118
Size

539KB
MD5

44acdfa6ac173129ca6538a6a81f20b3
SHA1

b5ea67a587e4635e6b1f8f8e8c718bec268163de
SHA256

2e4a0e9435f9e0d26dd078c12d5ae806f801c26077fc675e514584ed2250baa7
SHA512

ff60d473552fa0231b906cfb71142c778a76d5e3ba835f166da20573ffa1e88faa46b642f42bf3d8b890d6f62a62589c961ad708a87801e2d99a6a0dfee93013
SSDEEP

12288:xFqXz6c//////9tFErg9T8Cz7xwkJFjIVYoHU77MNx+GPj9AUs2Ls1GnSBLlka:xI6c//////HJzIVYWU778x+AAUs2Ls15

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44acdfa6ac173129ca6538a6a81f20b3_JaffaCakes118

Files

44acdfa6ac173129ca6538a6a81f20b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

madTraceProcess

Sections

CODE
Size: 425KB - Virtual size: 424KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 77B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 236B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ