44c1d80de7c71f37f738b96c73d2d479_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44c1d80de7c71f37f738b96c73d2d479_JaffaCakes118
Size

252KB
MD5

44c1d80de7c71f37f738b96c73d2d479
SHA1

d5ced8b8efe67c1239d78d9776f46b6d7bef14eb
SHA256

03ef00570c28d82c46f5458c991a5633e168ad1cb675b6394c8ea02ffd9b319c
SHA512

0095825bd5dd9040b63287cf45b8b856a46ea84264b873f31897ac06bf0402a47c1389462ce08fa2b3bbaffdcfef9afa37884963de40cd0a4877180a6e9100c8
SSDEEP

6144:9x+/eqxNY2jPFGOvVT4adqlLGukiHYcUm3I:9EBxS2rFGS5AMLi4cU7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44c1d80de7c71f37f738b96c73d2d479_JaffaCakes118

Files

44c1d80de7c71f37f738b96c73d2d479_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.data
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 629KB - Virtual size: 629KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ