48cf34225f5cd34481093a5ebc19b156_JaffaCakes118 | Triage

Sharing

General

Target

48cf34225f5cd34481093a5ebc19b156_JaffaCakes118
Size

649KB
MD5

48cf34225f5cd34481093a5ebc19b156
SHA1

802fa8af818ff36268c1d2b55bdce7549d10b715
SHA256

c2f6d692b40e8e242926ac13923b0c00e820eedf32a7292f5916914cdb140c75
SHA512

35ca53c09628f86492c3e6fce589c089666d562bd1c1653636cfe78a99e19b268d4d75c011b8a3d0d8c15c10cea45d25d234f73caa992fc38d80ad3b06d93e87
SSDEEP

12288:lRL8HNWn7QGLaRqP9gkl5GCmRhW7P3ioGXS5zmSPXPL9c8b85j8wBiCJKCg:lFMwn7QRCVGnq7PdfzhPXPeao8rCRg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48cf34225f5cd34481093a5ebc19b156_JaffaCakes118

Files

48cf34225f5cd34481093a5ebc19b156_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.WZVIP0
Size: - Virtual size: 798KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WZVIP1
Size: 944KB - Virtual size: 943KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ