4b6eef7de9700d5ac40c2947f25970c4_JaffaCakes118 | Triage

Sharing

General

Target

4b6eef7de9700d5ac40c2947f25970c4_JaffaCakes118
Size

272KB
MD5

4b6eef7de9700d5ac40c2947f25970c4
SHA1

55c6e42e2f455d0faa5df0400fcc507ce97b0b74
SHA256

396e77f6143869a7752c66ccf8e81118ce18aaf6422721d4b7c6d6742f65f47d
SHA512

454dc7f004a7026fe1c135cc2a3f2e04724d26de386bf9ae9a474cb928eb2d6d577ac6ce9b583319c94e4bf132108a4cd56de9cec28ac83af5d5f535df65b492
SSDEEP

6144:R8C/D6as9lG3GGBl37/pYLxlCJxZ/Pp/yq:x/DA9l6Jrbpklocq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b6eef7de9700d5ac40c2947f25970c4_JaffaCakes118

Files

4b6eef7de9700d5ac40c2947f25970c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ