44d18c27e0ad7c165084961c6678e7d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44d18c27e0ad7c165084961c6678e7d8_JaffaCakes118
Size

78KB
MD5

44d18c27e0ad7c165084961c6678e7d8
SHA1

ddc2b8af38c38b4b8c48e7d22e32158d260a4920
SHA256

59362564d6c1114d1339695af334ce2396ab85c88c8cf3bed6bf3c3555d8bbd4
SHA512

749b5c765ad682c13dbe6565f329f8ddcdbb538e6701a3037ad829c23a5073ea4714f0e31bf415a1aa0adced65b1da42fe2eb2b4996dcb7c576adb9175601b74
SSDEEP

1536:poI8pqL/colojrdNwj6SSfHLyy3u5bE/U572RwD6Km/FfAIDytnQv9hV0Jy6:poxpqTnAdNwj6Fyyg4/k2RbKWrv9/cr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44d18c27e0ad7c165084961c6678e7d8_JaffaCakes118

Files

44d18c27e0ad7c165084961c6678e7d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 483KB - Virtual size: 482KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE