48c3172b2b8a19bd63b3b3a81c7db4cd_JaffaCakes118 | Triage

Sharing

General

Target

48c3172b2b8a19bd63b3b3a81c7db4cd_JaffaCakes118
Size

9KB
MD5

48c3172b2b8a19bd63b3b3a81c7db4cd
SHA1

acac932ac8d5f7955cd8327445230dc272050eae
SHA256

9770e6b3dc56658adb2ec081df5bcb65d8f6f83f8d3f82313c9481e23cd2c5d7
SHA512

10bcd503112522c2f92295a1d66cc3d53cdf1bb74d260d61474d4c1f9d98e3ecf2b6fb12de60c3769e5bd51bcfdbb769043cc9b4f8416eb55748f01b1b0c0c19
SSDEEP

192:n1QNklOjG+fJ8VuySP9vIW88V/ij7m+1Io1UtvQdN5fUyYMlFwnJXeng:laiVXSpE8V/ij7m+1Io1wSN5fqUOJX+g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48c3172b2b8a19bd63b3b3a81c7db4cd_JaffaCakes118

Files

48c3172b2b8a19bd63b3b3a81c7db4cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 18KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ