476cde4b565db0a0e87514194b4156b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

476cde4b565db0a0e87514194b4156b2_JaffaCakes118
Size

91KB
MD5

476cde4b565db0a0e87514194b4156b2
SHA1

d83f461978829c488e30ca9ceaa412026c8c1896
SHA256

97dd2e8363d0f9a13c22f755c7cfe61a7a98bbf946f611dee7b556bb668678de
SHA512

f8e679070e6be2d62a775a055a206838662778312c665124368052307c8c876907321bc668fc79a869155db0a0e33caed48fddf9e3a34bce7b13355f38415de0
SSDEEP

1536:evOgZEraup7J5ovOYZN8oUUpOa6EZWOCinvif21z/Ford5dlGUb:evMraez/uN8o2aZW72/ifb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
476cde4b565db0a0e87514194b4156b2_JaffaCakes118

Files

476cde4b565db0a0e87514194b4156b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.TEXT
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.topo0
Size: 1024B - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE