4b9db72c91b8d8b356d2e1fa1b7e6e78_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b9db72c91b8d8b356d2e1fa1b7e6e78_JaffaCakes118
Size

537KB
MD5

4b9db72c91b8d8b356d2e1fa1b7e6e78
SHA1

559e43fce50f9d88dd4775ff5b051c0017fe557d
SHA256

4ac657504cb44563bb3a105d26ea715745c1c24ce30f03b46cfa9eb9e3c1d44c
SHA512

b19cf21360020ab8ecccfaa6323be9ce5051685a7abef82213f298aa4ca686540061a9df61ad47d3283d1793e5f6f6bef133c41a88358274405fa6a29b4c888d
SSDEEP

6144:32eiUBgsRhPT6sPWUrktJhniCyDv3l1bNpfmBOuFMs1vv8EFMbsWLrgzinobH+lf:yUBgsRhPmPFiC2N0OuFiE4vgzinMHUf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b9db72c91b8d8b356d2e1fa1b7e6e78_JaffaCakes118

Files

4b9db72c91b8d8b356d2e1fa1b7e6e78_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 452KB - Virtual size: 451KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ