48e06d8fdb754fd67ace449dbe976de9_JaffaCakes118 | Triage

Sharing

General

Target

48e06d8fdb754fd67ace449dbe976de9_JaffaCakes118
Size

74KB
MD5

48e06d8fdb754fd67ace449dbe976de9
SHA1

57fe54d7130ff3c2e027e44fa42c161d76da7ac9
SHA256

51175d5784230caee36acc3597a64f75f60c8052d124730cb0fd4766f383936e
SHA512

764d2417d2b9017dd4c4742e3daa3dbc83419d9671e66067142aafc1950b6730c311d3559e71634abe67166dbc03cb1f2306378781752929848250af134ab811
SSDEEP

768:skNRUQ7GHld4WLb+RY184nNkpG2L+aVyMemlf1CTnnHa7i/f/EPb:skNk7b+aRepLFVnNL667i/f/EPb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48e06d8fdb754fd67ace449dbe976de9_JaffaCakes118

Files

48e06d8fdb754fd67ace449dbe976de9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATa
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

coDe
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.IDaTa
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Bss
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bSs
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DaTa
Size: 5KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ