4492a9a9e9430bc9bc77369cc6734405_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4492a9a9e9430bc9bc77369cc6734405_JaffaCakes118
Size

193KB
MD5

4492a9a9e9430bc9bc77369cc6734405
SHA1

7e7d71703c630e1ad00a986f889204fdfc77fb9c
SHA256

2e53e05a41514ca5dc269eb65f30c0fa4a99554e480cd7d1cfb7f6e9ea3a7d85
SHA512

0993b173dd026aa2fd9a208804ce4b5acf7187b339d949417f858a84c203ffad2290941edda63242aa44ac575435c2d40898d1e9d43bb1d2c6f8bd665c4a9e8e
SSDEEP

3072:8QYC7y+hlrFfmBmS8WrmhOHxf4GRaX7q5:FYCzfBimhOGGR47O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4492a9a9e9430bc9bc77369cc6734405_JaffaCakes118

Files

4492a9a9e9430bc9bc77369cc6734405_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.taat
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idaaa
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE