4c30a9270fb9fb5d53589cdc0982bf0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c30a9270fb9fb5d53589cdc0982bf0b_JaffaCakes118
Size

317KB
MD5

4c30a9270fb9fb5d53589cdc0982bf0b
SHA1

a4d796958e601d9ffcde9264bd14b08daed6a5b5
SHA256

556923203a04d5aa4b2c04bd26e37144207e93f8415c7f756b58a9f7986b7748
SHA512

819a399f2bef8bdbbccff3c1aa71b88a05c19b98baa56dcc02b313a17e6f2778539a0a0173b80638e1bd4ed68cd1ba4cf9b295251ab299ccf248ddf1303a8b26
SSDEEP

6144:byr1fcDPZIDeoxqdSzuWPu7g/Hc2dwv/rCPCE+nPTzojQNHJCOGZUDfQ6w6BumVO:Or1fcCDO8/t/Hcmwv/rCK1nCQNHJOwsx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c30a9270fb9fb5d53589cdc0982bf0b_JaffaCakes118

Files

4c30a9270fb9fb5d53589cdc0982bf0b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE