4c5d103ddbe41a3f9c964db199f3c750_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c5d103ddbe41a3f9c964db199f3c750_JaffaCakes118
Size

603KB
MD5

4c5d103ddbe41a3f9c964db199f3c750
SHA1

f3dc87d7b2cb477686d23844d7d401d884d61bb0
SHA256

805ee04248eec12439afc2de66ea0815eb78aa8354432f6dd4271f8cd2123a3d
SHA512

c9e432e89822e2fb508b137ecc5a2aec13778fbf05deac467c91b0be3246ce0e4b88e48cacd67545c15b773a9e29f79c2f0e6b31d0b8d83cf77cdbe09c140c12
SSDEEP

12288:7sp9zriGyIMBnUtKEDkwz5AMTLDPOujT5hvcIU:7sfviXBnyKJqHTLD2QzvcI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c5d103ddbe41a3f9c964db199f3c750_JaffaCakes118

Files

4c5d103ddbe41a3f9c964db199f3c750_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 512KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ