479e32578fc0cda00c1e1c8afc77e3b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

479e32578fc0cda00c1e1c8afc77e3b5_JaffaCakes118
Size

119KB
MD5

479e32578fc0cda00c1e1c8afc77e3b5
SHA1

9d848dd5a6af9362030ee8f0b5a49bb67dbef009
SHA256

fe42edb905cae21027d932afa3263fb823ee999633b52debd9f867c57743af66
SHA512

19dffd1d58597a1fae5de8db007e9310165e82194518c46be0e18e8d4ba592be77a20d00ee9d1f8f2ce2aa9d80c06e83ccb1ed07f4bfd859cf3621dc4f97b814
SSDEEP

3072:hH2k6lhvxqJM3rYMdB2CBnH8rHCa17le8n9JPj:x2fl7q2EW0ljz7lRnbb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
479e32578fc0cda00c1e1c8afc77e3b5_JaffaCakes118

Files

479e32578fc0cda00c1e1c8afc77e3b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 11KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 36KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: 9KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ