48a80c86a24232f63b97481ebdb6e74b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48a80c86a24232f63b97481ebdb6e74b_JaffaCakes118
Size

263KB
MD5

48a80c86a24232f63b97481ebdb6e74b
SHA1

b5bd8d0be543057b00f816d6bf848d4a621eea77
SHA256

8205ffed279f1fbfa672d83364bef3e6cd587db3129c1f40835981092adb37cd
SHA512

afb25a64e2df2d33cf68bc06443b27c8334cb24bd3967a31e58da1d85042a2cbaf46c29af0200c9fbc0ee0c6804ae8c33b7ab88262fa3f33a2f03acb373b1974
SSDEEP

6144:x538RpcCJJvHJbdfKppBkmBzIc9uHMstd1IpVbLoGyaBagUUL:qbJJvHDSpp+mhX91std1IP6cL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48a80c86a24232f63b97481ebdb6e74b_JaffaCakes118

Files

48a80c86a24232f63b97481ebdb6e74b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.itext
Size: 1KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: - Virtual size: 3.0MB

.reloc
Size: - Virtual size: 460KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.info
Size: 208KB - Virtual size: 212KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE