488f69dda7bb4366c157a3ab6fae13ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

488f69dda7bb4366c157a3ab6fae13ae_JaffaCakes118
Size

348KB
MD5

488f69dda7bb4366c157a3ab6fae13ae
SHA1

00a241273fa7a1e9ecb87642c00c15666bed1ee7
SHA256

e47c056a73d696b75b909289b3bf9fe52b6a747c114e0e2604274401cd340827
SHA512

ad6b6df82c7214fa1cf804ec26b353096b7fd1da8758fb54f14468e2e238a351f3d156af367528be1a84c54fe6bab007c4f4d319590733600c3e28086af86dee
SSDEEP

6144:3dY+tH5OsOUNQj6HQzr1WJmPs5G6FFrm7DEdFU:3dbH5OHj+Qzr1jiG2WEdG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
488f69dda7bb4366c157a3ab6fae13ae_JaffaCakes118

Files

488f69dda7bb4366c157a3ab6fae13ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.newIID
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE