4538349fd53118fe83710dc7c9467c04_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4538349fd53118fe83710dc7c9467c04_JaffaCakes118
Size

555KB
MD5

4538349fd53118fe83710dc7c9467c04
SHA1

6061776a4630401fb8f3f232d755743dcb445d31
SHA256

7597c9cec04defc8855e54ed23ba02e8c48667229941db81c7b5547bb2c1fe63
SHA512

5bba9673814db0ffadc3385d0eb0d56e7cbc219e48f94cdb180f0fba80436768ab586f939c67334876c7392d20c31853428a7a1de173d7cb3af2112372eddb3e
SSDEEP

12288:O9dMi6BSE4cl0uIPJCWHtES1JxvqXSVc0A5Sv:OOiFE4clcwevrQj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4538349fd53118fe83710dc7c9467c04_JaffaCakes118

Files

4538349fd53118fe83710dc7c9467c04_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 472KB - Virtual size: 471KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ