4a6d2782101bddc151253e03d0d76053_JaffaCakes118 | Triage

Sharing

General

Target

4a6d2782101bddc151253e03d0d76053_JaffaCakes118
Size

283KB
MD5

4a6d2782101bddc151253e03d0d76053
SHA1

89d0403506263525b421d3e674788838f25d8cc4
SHA256

c7bc7c0b9e2103e88d61d5051c497f047cb5d27bbb0f130ac2f166c69cfd871b
SHA512

98e4500a8f568c7e909e4067fa63f689d996bdf5aae6624ce9c99de3ae0e461e588ba0e7d69415b9bc8e6c2005f94127b8eeb07021e7eea236e66ee2360bee1e
SSDEEP

3072:cXH8tr3nRw/LDuvexKR6k8XndNA3sf1gX0kgME1v9lFKpclHGukTQ3lZANmPr+g7:qHu7e2/RW9J9Ic575F71hw9DTjR8fGk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a6d2782101bddc151253e03d0d76053_JaffaCakes118

Files

4a6d2782101bddc151253e03d0d76053_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 364KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 180KB - Virtual size: 43.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ