4baaf86bf6c9fa61e6dc4124879fce33_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4baaf86bf6c9fa61e6dc4124879fce33_JaffaCakes118
Size

615KB
MD5

4baaf86bf6c9fa61e6dc4124879fce33
SHA1

aa3f7cf1b700bba774642c53711b7af0c722320d
SHA256

e2fdd7f6d13ab9cdd3c5b6028402dd0c0dbcecf3c19033788c8a65caf29e94c7
SHA512

a3b248884d0220bb456437e3070050f62392d0adfd0508612aede6116efc0586061985d94c1c79fb42b3d6c890218e8aeff3a581d6f7d9a448abdc0ae780e5b9
SSDEEP

12288:oHPU2WyJI3Il3m2GpkXqolV24/Hf7p9gEYlMz7ONRG:oc2LOK3PGyXNpPfjPYc7ic

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4baaf86bf6c9fa61e6dc4124879fce33_JaffaCakes118

Files

4baaf86bf6c9fa61e6dc4124879fce33_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

WinLicen
Size: 561KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE