46601755e73dbd032b73b3fbb4f849be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46601755e73dbd032b73b3fbb4f849be_JaffaCakes118
Size

80KB
MD5

46601755e73dbd032b73b3fbb4f849be
SHA1

355aff0a8edb9040209fb1d0ac9cc7b7a34d03c4
SHA256

7ea7c6efc5b556cd092cd9b760f36fa9cca21d63dc019f55484ec1c9bf09522f
SHA512

a6ab2a2abdce1eda0c8a31ad5b45e4646a112e25c80601dc19dd70f3fef43b245dfefd978f6d897a444381f26bb53e8f55098c064a0c6f86b59b3d895b5ceb99
SSDEEP

1536:pBtZ4zr6EeE8XFOBln7S0A/tjILF4AfKsCI6ZzmEbkj7bM1mewka3RQ9pLk1RBuu:9wey1A/lIuAfKPIY/b+kmew/RQs1RBTN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46601755e73dbd032b73b3fbb4f849be_JaffaCakes118

Files

46601755e73dbd032b73b3fbb4f849be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

_lpmko0

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 325B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 67B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ