4b22031ff9ada3c5671ed2ce1798a378_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b22031ff9ada3c5671ed2ce1798a378_JaffaCakes118
Size

16KB
MD5

4b22031ff9ada3c5671ed2ce1798a378
SHA1

e1f3478cc20ff969e3e0d279810f345b12347af6
SHA256

5937ee540185d94d56f0999c5e6062263dfb0ef952cf0cc962bc5383c9597ac0
SHA512

b4d95bbbdd1ecff941b2e86d3d46788b036ebc19e40989a6e2408f47f71c9062c78edc7276dc4c23b8da02ab5838ff2764ec32fe9ccf0b8a5e03f82eb05c45b4
SSDEEP

384:PbcPoQMYAX4QUGqWcLp+w+Kh1OkpisUmRiWt0bM+L:PbcQQkqWguitwKw9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b22031ff9ada3c5671ed2ce1798a378_JaffaCakes118

Files

4b22031ff9ada3c5671ed2ce1798a378_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

A6T0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

A6T1
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE