4b4420a3c40fa1f4c801117f7a171144_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b4420a3c40fa1f4c801117f7a171144_JaffaCakes118
Size

247KB
MD5

4b4420a3c40fa1f4c801117f7a171144
SHA1

6f643f3db70775aca8bfe40c647d8260920193eb
SHA256

d60ce19f9e3ddcc4953423c6828daf2f224e6d2d63c9451624ac7838a196bb17
SHA512

20a4315726bfa7c9ea5efd63d260fba97e107894fa847c8fd715aa705a1a166211c468726e4137e3aba7317f01c192fc93f62f4a9989fd9c895e66ff5d3b10a4
SSDEEP

6144:ICZAJsVb9TTA+uwmynTkR5GMMtLhMoeHgw:E6VbBZ/kR5GMcWogj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b4420a3c40fa1f4c801117f7a171144_JaffaCakes118

Files

4b4420a3c40fa1f4c801117f7a171144_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 223KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ