4598556d544cc4f9dcc49c24ed58075e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4598556d544cc4f9dcc49c24ed58075e_JaffaCakes118
Size

296KB
MD5

4598556d544cc4f9dcc49c24ed58075e
SHA1

eec72440e28c8eba5e158b799911f82934ddb18b
SHA256

771bf2d547fc26ab3aff7bcc9caa7054e6d614fcc922efffb6a0a3bdbd418059
SHA512

275846f07e4b6a7663ee9426631835e5820d221bc06a3da821be9598423198026a3a3a46fccf21940d24362e3afd475a3e636857c517e6c043f22ec873a43215
SSDEEP

6144:2o4ksvUGxVreDa0t8EYkJECEMnj05RoWfvh8EybgjmToW2bA22J:2o8VreDaZEz7/joRoDjUlAx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4598556d544cc4f9dcc49c24ed58075e_JaffaCakes118

Files

4598556d544cc4f9dcc49c24ed58075e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 258KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE