46815fddd99586a21368d2c8adc76a90_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46815fddd99586a21368d2c8adc76a90_JaffaCakes118
Size

126KB
MD5

46815fddd99586a21368d2c8adc76a90
SHA1

7c33b9903e01e2acad687eacf2d247ef81e3a5ce
SHA256

a6a2f9001aefab985abab9cc63101884d582d0829f5d54ccc224ddf0059cde8c
SHA512

7c6030f32879692a761e0a59dd77c962d7a197187fcb56d697911aff86926281b759fd66fbdbf028b618bcf0526a40fb8c262feae1c88ebb084d6829881b4577
SSDEEP

3072:7kqz4MrD94M63kxtDPJjaGW9jNQeyWKRnRlZW7:TD9563A5RW55GnRu7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46815fddd99586a21368d2c8adc76a90_JaffaCakes118

Files

46815fddd99586a21368d2c8adc76a90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.rgnd1z
Size: 3KB - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fglpgb
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.null
Size: - Virtual size: 3.0MB

.data
Size: - Virtual size: 456KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 120KB - Virtual size: 124KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE