4806edfac022667cbbb8bb52d95c163a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4806edfac022667cbbb8bb52d95c163a_JaffaCakes118
Size

44KB
MD5

4806edfac022667cbbb8bb52d95c163a
SHA1

9de3c91879aaeafa57c6ff315cc36018f15beb85
SHA256

9e7c56ffdb53e32dcc61c9c4e224ea19fe9b373ca15162db35682635c57b9a35
SHA512

220b35bbc42af6e416af89b8c51f8fe74d6d23e477d06f90f78055933670b1c63dcc763a4ab20024bef4f285a0e71b6c722ec30bd09b856087541d2e959791fc
SSDEEP

768:y9M9dw4kfE58YJxJU44oG9yRr7b68wV9ktPOkEw5K4qtfi4w6Vc8x:y0e6xJJHRrUzkDE+WhiJ6Lx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4806edfac022667cbbb8bb52d95c163a_JaffaCakes118

Files

4806edfac022667cbbb8bb52d95c163a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ