4676cc4881d4a8b5edcd5bbde60f0c3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4676cc4881d4a8b5edcd5bbde60f0c3a_JaffaCakes118
Size

59KB
MD5

4676cc4881d4a8b5edcd5bbde60f0c3a
SHA1

efdc6181bd879f5c8cb24a27bcb640cbfcd21c38
SHA256

2576b85b44aebe3bd14d6595ef3ab06c7b5cbf1c35873273e9587201676bb72f
SHA512

a354fa33e07c85f461d3441e2d5fec534f4b52104ef24ce9680d951ebb2850ad87c5419c137073943714c95874beb9daac0781eee57b6e1431443b826b97bdf8
SSDEEP

1536:qzzqIfhbp1pD7guQmR60wrhTIjPXYWrxRdc/eF0BgLR2Gxv:buQJjhTKIWJKQ0w2a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4676cc4881d4a8b5edcd5bbde60f0c3a_JaffaCakes118

Files

4676cc4881d4a8b5edcd5bbde60f0c3a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 16.1MB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 5B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zaer
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ