4682c787e593a39c511892c3a7240d45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4682c787e593a39c511892c3a7240d45_JaffaCakes118
Size

996KB
MD5

4682c787e593a39c511892c3a7240d45
SHA1

496ca510ac57576244c7041a11345d7398ca1082
SHA256

cadec071952615a693dc30d64d16645a1fe5a9bfaa89157d9bff307cf75edbe0
SHA512

5d37070514551a16b70b4f8b46877b3b8a7956aaf49d6e2313c84711298cfef5f44b1dcb67efd662b2432d510ed937e1771001871caeda840df18fec732bce29
SSDEEP

24576:WnE4pW6Ma44wO8U6sAregp0FNCLh+Zc17WEa:Wn66rCO8TtC3FNCdddWEa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4682c787e593a39c511892c3a7240d45_JaffaCakes118

Files

4682c787e593a39c511892c3a7240d45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 851KB - Virtual size: 850KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 96B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ