4a87870b16945a2341d3b184e6ef7aa2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a87870b16945a2341d3b184e6ef7aa2_JaffaCakes118
Size

1.9MB
MD5

4a87870b16945a2341d3b184e6ef7aa2
SHA1

e37586bba820c9c66f69f3dd2a147908b71f0dc6
SHA256

7617459b0da1f9a583d65c9a42b4f12c15ea91e832d5e476e1f6326980dd2cbd
SHA512

cafc7a34443273bcdbe713c01fc02628a3333dbdce39abcf38b4c4df15a192165796a3136e1ed8677bdb6c596904fcf7a39c3dbc3b5cbf287edbc370afa57a58
SSDEEP

49152:8QBfN6dLiB9sFon2nLo0MhZdifpM9jjN:8ofwRiB9sF0g7MhZQq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a87870b16945a2341d3b184e6ef7aa2_JaffaCakes118

Files

4a87870b16945a2341d3b184e6ef7aa2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 707B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ