4bc0d2a75d298bf65fd7cea980454097_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bc0d2a75d298bf65fd7cea980454097_JaffaCakes118
Size

579KB
MD5

4bc0d2a75d298bf65fd7cea980454097
SHA1

87a5d90ffaeb94975b4453d364ff04b436b7b78d
SHA256

4066dae278ff557786db038416aed67f749a72d0231f8b9c78cc54de49a252bb
SHA512

42df2fb38c7bd7c392b14f835d20aa367aca5fbe73f7bbc2406035d83ef54e6133d171f4d59e17995c14a6c98ae0009c6d019853f3b401abac7bdf7702397254
SSDEEP

12288:cwjdIK46Rz+cuvk4TCmFq1FolMzBdFeHRA:RjdRzz+cuvk4vFqwGPf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bc0d2a75d298bf65fd7cea980454097_JaffaCakes118

Files

4bc0d2a75d298bf65fd7cea980454097_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 428KB - Virtual size: 428KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ