47614d3e7150e60b48e82740e75610fa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47614d3e7150e60b48e82740e75610fa_JaffaCakes118
Size

1.0MB
MD5

47614d3e7150e60b48e82740e75610fa
SHA1

b00ddd13a1e22f192216ea5d650e92aff5236c51
SHA256

26e1320755e88be1651307612f567c2f8f96d9e25c1e04de7e9e2f4b933a3dab
SHA512

27f89934a6ef9bed9103c2e3676d5265a3df0c59e7a83c317e25c787de5f6016f06ebbad19b701b1f59a6ccae3f424fe50f8b2e368034a059d4cb6c802b8ec96
SSDEEP

12288:n4PkQtZ/Iz+AvPrKHvm494XqN+UOxBnbx5ApQX68K28gv+aHp2kQqBCy:n5Qy+A2eq/6nbxupk68X1Hp2w0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47614d3e7150e60b48e82740e75610fa_JaffaCakes118

Files

47614d3e7150e60b48e82740e75610fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 877KB - Virtual size: 877KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ