4820d3507fbad0bcbb3bf8117897c3d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4820d3507fbad0bcbb3bf8117897c3d5_JaffaCakes118
Size

209KB
MD5

4820d3507fbad0bcbb3bf8117897c3d5
SHA1

da9b8a19f917561989aa61beb02e110736652889
SHA256

78180d4cfc80d6e5b6d5dce17c9efaf23bde9d7c07f37b0c890f366741f1f113
SHA512

7450390c0ee88e2d2a2a390a21b18090bca6d72b0fedd0db76a75c67578b7f3f28fc806f0c58627d9bbf78b842735c40c8fbfb70bec9fcab9f0915d8e69b709a
SSDEEP

6144:xj9PlKrTa0CR4q9xaTeg+V21QtescF3NW:0T24qYt+VFcscvW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4820d3507fbad0bcbb3bf8117897c3d5_JaffaCakes118

Files

4820d3507fbad0bcbb3bf8117897c3d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jgd
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE