4968dc38fa9cc1252f781e7485a50663_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4968dc38fa9cc1252f781e7485a50663_JaffaCakes118
Size

198KB
MD5

4968dc38fa9cc1252f781e7485a50663
SHA1

b059d06198fe376e5508026d9204110f22e89d0c
SHA256

401a685a56a98521a2ae1dba3c5f5fb2e61dfc05fb40a2e40cf68a9a08a42531
SHA512

813ecf2f1c79cfedf8c6730a01ce1f5c3db8a724975f0cee8afbcefff89100e821ac9f0a41804a6ca63b3fb99448961c17ed2136fe717217c1138b8f2ea065cb
SSDEEP

768:Wy5I9E7MjMX97WIHPAfpJ+xiha5N9MgzQzTGfePzdf:WoIdoX9WImp1gegzQHzdf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4968dc38fa9cc1252f781e7485a50663_JaffaCakes118

Files

4968dc38fa9cc1252f781e7485a50663_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 14KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 140KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.spm
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE