47d8518d77a48bad7ffe06f797f3ba25_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47d8518d77a48bad7ffe06f797f3ba25_JaffaCakes118
Size

704KB
MD5

47d8518d77a48bad7ffe06f797f3ba25
SHA1

eb3df6063bba1e3882f8fc7d8f757aa044730d81
SHA256

0f176dc71378d45638e2456b3a9c08db2fa857c7c6c2f11dba261f2322b36d7f
SHA512

f2dbfb1ad5a7ee55dda619ac168e345f9cc355705fd8a8798a6909a194564025513e45865e6441ee6dd351d903135392cfb4adc56c5acc31f7cea1c5200a7c18
SSDEEP

12288:5na9KincVN1T1g4O4j8tYHl4G5IqS45vvNNEzyyCT/tcvS38LCJQBtdGs1rBLsJ:5nasYulbRkq4MK4uakS3rJQBtUkBgJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47d8518d77a48bad7ffe06f797f3ba25_JaffaCakes118

Files

47d8518d77a48bad7ffe06f797f3ba25_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ