4609a82ebd86ee214d7c39d777f6cb64_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4609a82ebd86ee214d7c39d777f6cb64_JaffaCakes118
Size

1.1MB
MD5

4609a82ebd86ee214d7c39d777f6cb64
SHA1

072b88b2242bcdb989583133808e3ef21a535d65
SHA256

1b46c862320af3091438a76a91878ea2a471371252a5e012d22c61bd2d061315
SHA512

57c1a07612511cf731c78ef9e1f4b8a4c28c52c7d8527c6e1fd9bcf2a7e054e368ce601bee3c98a392c3b41ae17c750c8b0bc470dc6c46aaaa4ad4bb57193547
SSDEEP

24576:Ed6znXFXPoc2Z5F9SF2WTEEmZh2AS/MXWZfjbIpOGoFM:m2XGhZ5F9bWTET/1DofjaObM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4609a82ebd86ee214d7c39d777f6cb64_JaffaCakes118

Files

4609a82ebd86ee214d7c39d777f6cb64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 325KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 807KB - Virtual size: 806KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ