4a2590dff496e449252e48a8304d58d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a2590dff496e449252e48a8304d58d5_JaffaCakes118
Size

641KB
MD5

4a2590dff496e449252e48a8304d58d5
SHA1

668a323fdeb5ca40373bf4993cd2f06d5742315b
SHA256

5d1eff13644ff4ad5159c360e8109b61fdb9297393ee01dea209a7737c8a2c51
SHA512

3234e26bf6851960592f3b382bbaa88ffa2c7c311497c2626167cae6b420b8b74b7770bfcc64b86082cf8f6e4122a7761f7d8b900d537ab27d77dde650179793
SSDEEP

12288:Eno5avu751kscIXrhdQkir2eecaLWVy/KD0oGK6hOYsies7:Enoa2vZrirscBVMCwKTWd7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a2590dff496e449252e48a8304d58d5_JaffaCakes118

Files

4a2590dff496e449252e48a8304d58d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 326KB - Virtual size: 325KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 277KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ