4b11a5f7e36b77fc4bd00d6d1b1df5d5_JaffaCakes118 | Triage

Sharing

General

Target

4b11a5f7e36b77fc4bd00d6d1b1df5d5_JaffaCakes118
Size

4.2MB
MD5

4b11a5f7e36b77fc4bd00d6d1b1df5d5
SHA1

39582cd5b91872ebb8b49984d66f1addcf56a3d7
SHA256

34bb066c4f4feaa414d2202f4cca89c994e5e3afa237fab3d2b385e4b83875ed
SHA512

f8f790531137d94b6d744eca37ba61c7e5806ac123caced7794e7569a5c6d961f6613c698d2389af7172a2f882c42b85974727705e5e1fa52a68cc3105af96f3
SSDEEP

98304:Z9b2yizTJsi8WYcybN1QuD6pl3GaYynHhnwTFPC2TD52:7iy2JA3HN1B4l2avB6J2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b11a5f7e36b77fc4bd00d6d1b1df5d5_JaffaCakes118

Files

4b11a5f7e36b77fc4bd00d6d1b1df5d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.icode
Size: 930B - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 3.0MB

.rtss
Size: - Virtual size: 400KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE