4b217f94e6842ae9ff715e393693230f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b217f94e6842ae9ff715e393693230f_JaffaCakes118
Size

781KB
MD5

4b217f94e6842ae9ff715e393693230f
SHA1

efd28fcca2afcceb7123d8a7ea58f513c7699941
SHA256

69ee5a127af93baa86db086ceaf3c0c115e0d3f9365e15dd290b731194ed26da
SHA512

9ac52eff1625cae5071628a7500607002698a35cbc975bed4cc826140bbe4f05b6c258499ac3775c5865f910dbfea4b8dc786359288aef7bacd15ac3af59071d
SSDEEP

12288:VRVGqBOENdb2ttiuotXno/zLc0ePU4U5uGjIxx1r7GC0a/xSvPjyr3SI7ccU9DwK:VSeOENN+Xl/z4h1r7F0a803aT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b217f94e6842ae9ff715e393693230f_JaffaCakes118

Files

4b217f94e6842ae9ff715e393693230f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 4KB - Virtual size: 316KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.const
Size: 763KB - Virtual size: 764KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ