47ff5af959b28195f8ccccc14642434a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47ff5af959b28195f8ccccc14642434a_JaffaCakes118
Size

307KB
MD5

47ff5af959b28195f8ccccc14642434a
SHA1

1b38496ea2f7b31450144d902c77f8f8e16e3b48
SHA256

18b532df590cd60e319ed052067098731fa5b42cc5f0a203bac5912e1cfce186
SHA512

e3ce7554ec42486cd2ad731d3b9f100713ae417168d04f5b0346b3644b9d8af1f990f774b5ee811cb901493e9d451254dc8cf42c3ecdff46196d9b4181fbb53d
SSDEEP

3072:lTxVP4Dvha3+T0kT6wMieUm9NeiMDCt3U:PMQFe643m9NelDCtE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47ff5af959b28195f8ccccc14642434a_JaffaCakes118

Files

47ff5af959b28195f8ccccc14642434a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 103KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

bgea
Size: 723B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ