4956f7cb854900dff238671597cf0cd1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4956f7cb854900dff238671597cf0cd1_JaffaCakes118
Size

36KB
MD5

4956f7cb854900dff238671597cf0cd1
SHA1

3ba61ebd29f496262eeb82971c5d9cf5ae6a6849
SHA256

6bb3f3dfe0d9f317f586edb5e08e1fa49d0a52a4c8095930651bb9a5c5d7757c
SHA512

af04655c498cae0aa0e2a11cc73bbb5ce9d7ce22cd51f15ec258b73adae1e0bedd489c669b6de24170a0c06ecea4f619918a2e0d0626976ae069cf41109aaf20
SSDEEP

768:pXsfwGe7fioYaNeWUT4Ej8cDRPKHYMuP+jqcBTy+:pXsj4neWTEj8cDZK4dPqTTD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4956f7cb854900dff238671597cf0cd1_JaffaCakes118

Files

4956f7cb854900dff238671597cf0cd1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ