4b6749fb2f229a6a0571fafa62b26d03_JaffaCakes118 | Triage

Sharing

General

Target

4b6749fb2f229a6a0571fafa62b26d03_JaffaCakes118
Size

98KB
MD5

4b6749fb2f229a6a0571fafa62b26d03
SHA1

db998f6087b08792069878c92df2a5ff8a26c915
SHA256

b018dafc2929383a7e1b220e195d252b604a359f03913d6b6253be50e376a6ae
SHA512

f78d2ea9acdf1d9a833caf2beb2bf7eb865dbd2e97d18e10f8288ec39fdae5d0e1a9be8eeab9b20b3a67cdf46763cb9ed551c95acda82bf5cda13b1a0c6b538a
SSDEEP

1536:yhErgFSk8D29dXPNmQ37fBJinABSozXVEdyjoPXO8ohtGcp/kxfQf:yhqgFp8D2vfNPryAnmkPhzktQf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b6749fb2f229a6a0571fafa62b26d03_JaffaCakes118

Files

4b6749fb2f229a6a0571fafa62b26d03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ