4c58e249b00fe1a176c4df38580c054d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c58e249b00fe1a176c4df38580c054d_JaffaCakes118
Size

19KB
MD5

4c58e249b00fe1a176c4df38580c054d
SHA1

a7674757080996f7558e893ea5676e19a16ded69
SHA256

551514980ff12f04e3f7050fe7e81899ae99395085b12cd56af1296bff5dfa28
SHA512

008133e186f48cd88d8f08cdf18e95ce4fb2afa769f6a170607d46183af9352271092c355bfcfb28f9b4373ba5cd562ea8aaca9c5211386b1ba4e50034228fca
SSDEEP

384:Q0QrA7+KBUU79MQoTW7U+hir6fIAad/bohPu1+zT0X:OrAahNQoTyiDAad0hPu1+zT0X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c58e249b00fe1a176c4df38580c054d_JaffaCakes118

Files

4c58e249b00fe1a176c4df38580c054d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.C++
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Ken
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE