4a7ea81650bcdf3edad1d94719a0ee4e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a7ea81650bcdf3edad1d94719a0ee4e_JaffaCakes118
Size

580KB
MD5

4a7ea81650bcdf3edad1d94719a0ee4e
SHA1

fea675effce1b9acc43f2050d3ad10807dab1ceb
SHA256

f3bcccc55c6d504fb0625d1a01438a280bace803437176c0cec38d8264f976eb
SHA512

21d5252e65ea80349c74b770fef477f3ea416d531aae9db4126d192402199c4734880daa219e7f62fdb9a0be400c51c24013e5dfbd0a8164f84a6724d945242e
SSDEEP

12288:huy/OxkA6X4rSPDJ2fJq/rTg477vhbCLsuHXVY:YaOxoX4rSLsw/flLhbCoYO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a7ea81650bcdf3edad1d94719a0ee4e_JaffaCakes118

Files

4a7ea81650bcdf3edad1d94719a0ee4e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 445KB - Virtual size: 445KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ