4bf3a2b9c5ca51bab0c38c602e06fc87_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bf3a2b9c5ca51bab0c38c602e06fc87_JaffaCakes118
Size

2.9MB
MD5

4bf3a2b9c5ca51bab0c38c602e06fc87
SHA1

7028a130959685b867d2996f4d0287f2c99f236b
SHA256

e6740c087170b0689a3d4e2cc51558d2bd6bb4bd1924e400e1269f80bfd5077d
SHA512

ccd8931be4061ad3f308ef3cf8c2570b6e04e912aa5bd4a941ab3e6c464916b6d734ef36a5133c73676a32425523c45e2f836fb21a92e0b36e7fd2d8e36c1f83
SSDEEP

49152:36iSHp7yB/twAY5sg8rqnVGn4iWHzCmshmM:qiH/twN5sgBVgknvM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bf3a2b9c5ca51bab0c38c602e06fc87_JaffaCakes118

Files

4bf3a2b9c5ca51bab0c38c602e06fc87_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

asa
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE