4b154999a82f3ca63102bb8aa6b2543d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b154999a82f3ca63102bb8aa6b2543d_JaffaCakes118
Size

41KB
MD5

4b154999a82f3ca63102bb8aa6b2543d
SHA1

2534b72776fdd916ae78fb9b0af847efaebbf936
SHA256

01481d1b44f71518cf275532fbbfa5b04b8079fac384f04743bde3e1752cb8e3
SHA512

b2ce37c681c6ded8fec448e5e9a9b95a8e7532cfe3c70a9439823084306cab1ec5f8025345e579cb0045007fac9268113d4b185abcea807c06670085a28003da
SSDEEP

768:HJSr21Uis28xF2+7zHFuZ2WACqy9hKNEMSulUt0YIHK1SWn:H42S7vPrWACGlUIY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b154999a82f3ca63102bb8aa6b2543d_JaffaCakes118

Files

4b154999a82f3ca63102bb8aa6b2543d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DPACKER

Sections

CODE
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 70B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ