4acf1eb7880dc16b32dcb7c37168c2b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4acf1eb7880dc16b32dcb7c37168c2b8_JaffaCakes118
Size

926KB
MD5

4acf1eb7880dc16b32dcb7c37168c2b8
SHA1

ecdd214f41e317b742e2efe9eea54f845367df1b
SHA256

04a5bb607c4f9d6d76dd95bf445edf8c4325c63ad1bdf6b7ce63d3ba292a773e
SHA512

cdb46a88a93653f6ab3aa7a06f74018603fff606f2162bf3cf79f1c76ca92ff0bb23fb406892d1e4a5c10ca4b554da14eae6e9d72d80703c272e2499338b7e04
SSDEEP

12288:MXayz9xyVH4RlYhSkcAf278n4jd1qHuiLTJ2SxwDIJWUOvASVc0Eg3Da6j:MXZ5xyVOYhSXAf27tjj+/H2MJWUOvwC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4acf1eb7880dc16b32dcb7c37168c2b8_JaffaCakes118

Files

4acf1eb7880dc16b32dcb7c37168c2b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 767KB - Virtual size: 766KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MaskPE
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ