47cd80db4d47ee1e0e9a79995f7e6da2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47cd80db4d47ee1e0e9a79995f7e6da2_JaffaCakes118
Size

3.3MB
MD5

47cd80db4d47ee1e0e9a79995f7e6da2
SHA1

11cc4520d3310983304c634ed1f17ff0af88700a
SHA256

ef35c5a9c2351a10043e7c0460ddf81f8566104268f8bd93add8eddac06f90df
SHA512

6a00d90f296ecfec0eb8c0898c55af4f4dbadfd5c2a9a7750bd232835744b7689c5f272c548d6cf009c677594100a17bf649c89fb9817f7135b52a9ee8636900
SSDEEP

49152:5DCUqWWrK2m/9ZbqZZ0wFYtuCDQ9x1hKSE:5DCUqWl9ZbuuKYttSx1hK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47cd80db4d47ee1e0e9a79995f7e6da2_JaffaCakes118

Files

47cd80db4d47ee1e0e9a79995f7e6da2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 14KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 469KB - Virtual size: 469KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ