4a3fcb96df7065e4cfc973338974c33c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a3fcb96df7065e4cfc973338974c33c_JaffaCakes118
Size

20KB
MD5

4a3fcb96df7065e4cfc973338974c33c
SHA1

cabfd1270db74628a4c8ae2c748560ec73db1138
SHA256

5e8a0674a8aba680fcf46a7b56698e4cd91bdfff3f87494c2e466fadff04e489
SHA512

fd4ae4ec1b61d71cb0be964a4d26694f2ec1b6a211af3a03263ed520276fe3ca866baea599f05851c16240f2a364bdc1ce4a3a2f0f56058cc8c4f4291ec3c32a
SSDEEP

384:nKax1EcBUFgvnM36zrgkhAqFn3kiEVKQSOYt8//j:KRcGFubrpAqFhEks

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a3fcb96df7065e4cfc973338974c33c_JaffaCakes118

Files

4a3fcb96df7065e4cfc973338974c33c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xiaohui
Size: 75B - Virtual size: 75B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE