4bb66390ec27901a12aa7ea407a61f30_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bb66390ec27901a12aa7ea407a61f30_JaffaCakes118
Size

543KB
MD5

4bb66390ec27901a12aa7ea407a61f30
SHA1

f0fb5d616827151d5058f578208f43386c1e9fb5
SHA256

752a69a13e6338ceac773163edc45c77ec43d2a2a80003ea87acb9219b74c049
SHA512

b1fe4624f63c1b879efd436e6c8a544b39b145741f08a12c6452e97b66eeec0469705204a7dae96bd514424a9b2810c5c4cc83a11a1203cf163b5ee566d8029f
SSDEEP

12288:UBWgZ/KZbAII9rFykRlYvZH3yz7/h7YdtVFfv5OM6AfXKEMfirOcH:kWgdKZsP9hykeCz7/h76hfx7p0fmOc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bb66390ec27901a12aa7ea407a61f30_JaffaCakes118

Files

4bb66390ec27901a12aa7ea407a61f30_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 533KB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

STA4
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE