460b278db2bb036449796fce5db32d52_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

460b278db2bb036449796fce5db32d52_JaffaCakes118
Size

840KB
MD5

460b278db2bb036449796fce5db32d52
SHA1

f305d1e7f490df1f2c96737a6528d37ddc0ed911
SHA256

2224c3943f60ee60dfaeaeb209d792d45b5388e257d766195383bc206e58ebc1
SHA512

754debc15e8d27b476b4a738ae71ccdd69c09239b6cb9f84b601c7576fe6e3338d30de3d6400a4a6caa6fd00eb2e1adba1778b47edcfffe035d93645598367a2
SSDEEP

12288:jUQ5WN5N0UcRLbe8ifjfTYw+wn39MLVqNnxd3VCzMmzMUPenwXqsu:jONQUcRvBcjfTY7w3KOxIMml2wXqd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
460b278db2bb036449796fce5db32d52_JaffaCakes118

Files

460b278db2bb036449796fce5db32d52_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 16KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

WinLicen
Size: 812KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE