4bf52008ef0741db3c157e9b6b2be25f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bf52008ef0741db3c157e9b6b2be25f_JaffaCakes118
Size

128KB
MD5

4bf52008ef0741db3c157e9b6b2be25f
SHA1

c0a7f69349ae9f92fca82b325a69b889dab8965c
SHA256

7f1af47e2d46c8b2b83f4c892506358d18c84f8f94a022264a0781105249c73c
SHA512

1a4fdd8ca4b647eb96cd384516dd79e1964ccd88d87da5e86799557511ef4b22989951702a1d47c0d6b79fbd96163acc56018af5127b466a4f07aebf64129c88
SSDEEP

3072:WigOihNKp1o1pHzr8zbzDfo0cOxEZvlthP06Z0VrfpTNPQL:7u+p1obHMfo0cmEZHFvZCrxTNPQL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bf52008ef0741db3c157e9b6b2be25f_JaffaCakes118

Files

4bf52008ef0741db3c157e9b6b2be25f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 106KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ