488fcd960074797b0f0d158b0b987564_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

488fcd960074797b0f0d158b0b987564_JaffaCakes118
Size

218KB
MD5

488fcd960074797b0f0d158b0b987564
SHA1

0de42aab6d4dc180e9c72633f07a69028916ffe6
SHA256

f82bd2454d34c00fd7a45b995aca4f8ac970645a115a10384fb65419b724af46
SHA512

51ed0416611de2fda3e6e834dd6c8e12677a738378a7f2b569490343b6f343b18e08057cc5c5610af32c785a0d4defc3bdbc6dcb8a57fb8772b449f8b8327cdc
SSDEEP

3072:oHtoOA+BC3K5eqZBMtBfAcTJ3cc17FHbq6afl+IUNyTajH+6wZCkcC78LeQcj:o7oK7Kt1JhDngl+IUNZe6pleQcj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
488fcd960074797b0f0d158b0b987564_JaffaCakes118

Files

488fcd960074797b0f0d158b0b987564_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

100
Size: 100B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE