486f450f978aa1d12086331962105dd6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

486f450f978aa1d12086331962105dd6_JaffaCakes118
Size

976KB
MD5

486f450f978aa1d12086331962105dd6
SHA1

b75b1308fc28bafd8f17c205ae1a65fd36220f81
SHA256

4f57fe30f7218053ae7d0c00f72391829777057f05f19fdf22aadb90094ffb02
SHA512

145b368433afd960d4091e0003b49f5aee982678d1589f082e518dc20345ae87f2c090a2709a7194c439881ed0d2038acc5b5b0c3ecbda4adb28de8fdc87fa3e
SSDEEP

24576:u1jtMuooBTyyYKI3Nx4Tc8Ggjte+OroJxH8/3iWYe:u1mbFKI3Xorjt0Uj8qW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
486f450f978aa1d12086331962105dd6_JaffaCakes118

Files

486f450f978aa1d12086331962105dd6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 944KB - Virtual size: 944KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ