48df4f5dc8a7c74b863b810f418f8d0e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48df4f5dc8a7c74b863b810f418f8d0e_JaffaCakes118
Size

316KB
MD5

48df4f5dc8a7c74b863b810f418f8d0e
SHA1

8167b75f22d32e128b78ffd63940a9f00ef4f0b0
SHA256

b5da0c67742e5c4e2331066c0fdbe1e49ad5c157931eabc5ba1082779f3bb152
SHA512

eb887a12f0af2ffc199597d1ea3635eedc98e15d9114c17fe62f7cade3fdd3a77d3a39ca70ee81c7428dce90dcd9bb70116f311d7b40c5ebf82403e726b7c75e
SSDEEP

6144:enAiqTpkSG+GYHfGHeX2UK5oecGE2TLchB:enAiqTphLpHueQ5oecGPPI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48df4f5dc8a7c74b863b810f418f8d0e_JaffaCakes118

Files

48df4f5dc8a7c74b863b810f418f8d0e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 122KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ