4bf05d96b47dd061714aaf12c4498af9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bf05d96b47dd061714aaf12c4498af9_JaffaCakes118
Size

222KB
MD5

4bf05d96b47dd061714aaf12c4498af9
SHA1

e6f486cf7d81a7705a1d640ec3245e576d5e2102
SHA256

18c480504be8a9a1c45ed6ff259140b33ca26a13d46e7acc975a05c8d681ed12
SHA512

5f7b96d920511403c36b18683ff6a30b06dd55ae68ccc63f7be4b10562a3aa2023af3eb85ba3db3bdc638fb18e7ff021098e9fc4ab88f8ac70ebc5550a9b42ad
SSDEEP

6144:QfjZ//ir8fykm1ykxhe60QAUibuSViZdK:Qb1/ir8K1Vx060BbuRZdK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bf05d96b47dd061714aaf12c4498af9_JaffaCakes118

Files

4bf05d96b47dd061714aaf12c4498af9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 306KB - Virtual size: 305KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ