48bcc8767e8dc035ef1509df225080d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48bcc8767e8dc035ef1509df225080d5_JaffaCakes118
Size

8.3MB
MD5

48bcc8767e8dc035ef1509df225080d5
SHA1

4ad83e9439b63173a8ffc66d4d4a69aed65aa90c
SHA256

049f89c456ad7d305cac7b4d715491b0527a3e2b4fc7f092275a6768967f76e1
SHA512

e580d3af80a0bdf31c3e0e0c0406cd11837698e6c45e79f79f7de81fae271248e9d4484e2f546b2194d5d34c092573ffe1310cf588e85b490b7ef567ffab8468
SSDEEP

98304:YUU5fTMUSvQ/tcZn5JUZrUZFUZWUZBUZQUZ:YUU5fQ1I/tcnJUZrUZFUZWUZBUZQUZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48bcc8767e8dc035ef1509df225080d5_JaffaCakes118

Files

48bcc8767e8dc035ef1509df225080d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 941KB - Virtual size: 941KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7.2MB - Virtual size: 7.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ