4bf8e49a37738515d5650ec53885bf34_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bf8e49a37738515d5650ec53885bf34_JaffaCakes118
Size

145KB
MD5

4bf8e49a37738515d5650ec53885bf34
SHA1

47b751d9106ec17e17def7b8d6ca006fd0d00d65
SHA256

89bb9ce0c5fac017b1f4d1f06c37b50820c5fa6c93c946870d2096cfba55847b
SHA512

038ea672257078b14f3927e3703a9509863c8eec82ccd31ebce93e418adcb654ba817e3bc8bbe3657fd288d59ca21cb47e52634f7aa80317cbda058caec21613
SSDEEP

3072:J9PkfIX4VkquyXauf7ww4LRfe4tj9o/bEV6FSqUgfovR9:Hkdvx7wwi6/s4SqpfovR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bf8e49a37738515d5650ec53885bf34_JaffaCakes118

Files

4bf8e49a37738515d5650ec53885bf34_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE