4610e7f0e86e3a9d4d99cd099829061b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4610e7f0e86e3a9d4d99cd099829061b_JaffaCakes118
Size

196KB
MD5

4610e7f0e86e3a9d4d99cd099829061b
SHA1

9085487a268392e7cbd484bc25f7b9b041b23263
SHA256

41de493815626e88333e7ab8c18083b04bc880ef42dc95a230ab842a4fcec676
SHA512

11d9f2b2385e1d7f26c6d3a3455950f9a86a2202fe3bf087a4e6ae9c4f1953faa27a321b8dcc833f1085c89a133c1b2426bfe634b81c6885c9646b9cf31e310d
SSDEEP

3072:xQw6mgl06GzAbpl3Pwj1q2SvgCQqhAgD8F/NSLxauNO:mw36Y6l3SIzgCQqye8F/gLpO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4610e7f0e86e3a9d4d99cd099829061b_JaffaCakes118

Files

4610e7f0e86e3a9d4d99cd099829061b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 209KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ