4540c0fe70bc6da752fca11bca5047e3_JaffaCakes118 | Triage

Sharing

General

Target

4540c0fe70bc6da752fca11bca5047e3_JaffaCakes118
Size

20.9MB
MD5

4540c0fe70bc6da752fca11bca5047e3
SHA1

32c801a47ecaa48f93aca89a795d4620dc966dfc
SHA256

b3b4f13e0d528db023397c2aa6d152b1b82f894640c47feda701a05949ddbc03
SHA512

56cda79b24aedad9ae6302b690dab61396ca17d83050a18e8733a6804a276eeb2b5e88d21010bbbe9f72d8101fc96767138d2b1ee92be95c0293954d62795bcf
SSDEEP

393216:08lAwVKyYKLxQQ7OQx18kApSbvARkJlEBtLeOF7TyKe4zDl:jq4KyfLyHkA8AR8Qm4zDl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4540c0fe70bc6da752fca11bca5047e3_JaffaCakes118

Files

4540c0fe70bc6da752fca11bca5047e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gda
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE