48eca452f093d9e47697d188afd32dfa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48eca452f093d9e47697d188afd32dfa_JaffaCakes118
Size

23KB
MD5

48eca452f093d9e47697d188afd32dfa
SHA1

8e6007d83afa101b43627aeb7b321f7f4c0e908e
SHA256

87c86ece8a3dddce83b0653a4f226597deb13762ae0ecfe37c28ca239b61e190
SHA512

8404cb20d27da8345e01c582322bdd7ca5937054cdca86a42e83fa2dba74ca317738541cfb8616b1811e54c51047e4b7bca120def217ecce7ad564bdd637f8a1
SSDEEP

384:AkoBBJODbe091ukx0bHjK6CnhRCqnR7OVMNWgs+CWD0Op2g:AFJOPew1ukxiHmhOVw3s+zD0OJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48eca452f093d9e47697d188afd32dfa_JaffaCakes118

Files

48eca452f093d9e47697d188afd32dfa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.ecode
Size: 17KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

p1odixlv
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ