4901d170867980672748ab0219102558_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4901d170867980672748ab0219102558_JaffaCakes118
Size

793KB
MD5

4901d170867980672748ab0219102558
SHA1

0f7dd106d2348a105f3bcb395d51d1fe420f07c2
SHA256

c76ad48fd6f7a887f1c23d0fca9e9a6d7d36ba8c674cc222f096ef97cbbdc388
SHA512

1051bc76145344a077dc681a0d51417ff15218c7a13e5e83d8a39edb9816ff6e57b50d3cc25948b7d11c05b47a5e6e283aee61f3d5f0aad75b5b6a63980eb040
SSDEEP

12288:Nd+SBXS/6WCZeUvQlb7CrrRCS/91+NPZwEhhJPi:fPO6Wj+QZwR1/PUwELJPi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4901d170867980672748ab0219102558_JaffaCakes118

Files

4901d170867980672748ab0219102558_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 417KB - Virtual size: 417KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ