46c42c476da28387141782450c1d84e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46c42c476da28387141782450c1d84e3_JaffaCakes118
Size

809KB
MD5

46c42c476da28387141782450c1d84e3
SHA1

552fcecf920f267599d6643c9bc052e2bb4b8f0a
SHA256

2db20f3dd51d32eddc6950965616b0461ab422262b2fdd83ce97eba58afe14e8
SHA512

3b24ad185f8545dd4be76e6027d69912dfca8485fabda384800c0c87be4a7bb4413f2ba57e60cab31d340e0614cb3c198b9cfe0ac244a1f12ddee5bc01c80758
SSDEEP

12288:N0DHdee46rAD8XucWpEMNRw2WDCX1nlVj/O+MVUbore3XvlykmFBLq4JvF:aYb6ujcWp9b6KnltMibge3XvQbvq4l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46c42c476da28387141782450c1d84e3_JaffaCakes118

Files

46c42c476da28387141782450c1d84e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 709KB - Virtual size: 709KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ