4b89c459a6b664dc907404db5d160686_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b89c459a6b664dc907404db5d160686_JaffaCakes118
Size

430KB
MD5

4b89c459a6b664dc907404db5d160686
SHA1

d12808aa17c1d187d2504f7ecbddda67fffccf7b
SHA256

95d20b36c239f0ce8bbfa0663ac080b08d458e76d3a3c218872424c175b04819
SHA512

ae0889b21d638c1d1be737c5e3f7922730a67f6abefa717549707327226abadba413a4306455b5366c62fa238ac41ec7b517159eaf60a2eba706ef5fd3ff95e5
SSDEEP

6144:mkU6yzpD2YszEf76xQICgJIErA8yX+mpueA+mfKkFVDLkpWuLZ83lCuDKzbsB:BUf6YvOxQICcdrAz+USXxkpOlCgCb8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b89c459a6b664dc907404db5d160686_JaffaCakes118

Files

4b89c459a6b664dc907404db5d160686_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.qaltic
Size: 3KB - Virtual size: 928KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ksuuxo
Size: 117B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kpqhqd
Size: 415KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ