4a6e678da34851773d85411847a09b1a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a6e678da34851773d85411847a09b1a_JaffaCakes118
Size

561KB
MD5

4a6e678da34851773d85411847a09b1a
SHA1

aa37241979583043f73183b0c31756a317238489
SHA256

790f44ddc7b5cb9e765996d5ebd5daad0cb2cb01197744e83782226fb90fdffc
SHA512

b1202aabf8567eab0ea31d6791cc02df1b5f7cef585f9a0ec93630b169864ef9e15da30128e3547eb0e618c8a9288debdf5a8bf753dea5eadd52615c4f04126a
SSDEEP

12288:djubr5ZI+RE+lxzO9xqpvgoQfRaBTaGl6Pe3e+5YIIk:dj2Z9RvO/yvgo4asGlzYI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a6e678da34851773d85411847a09b1a_JaffaCakes118

Files

4a6e678da34851773d85411847a09b1a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.bss
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: 207KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 337KB - Virtual size: 536KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE