4c98302d571fb621bcc4a8cdeac3fbfe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c98302d571fb621bcc4a8cdeac3fbfe_JaffaCakes118
Size

1.1MB
MD5

4c98302d571fb621bcc4a8cdeac3fbfe
SHA1

4595babd65a16444c0e58a21b4b61ba0351c1c60
SHA256

d48c858ec890dc1779f8d6ed85f429d737ddace45ed709059e1fe5d7ab87b3a4
SHA512

4503ba14b2febd91199a2882502eb9de1782f498e07e4da236fc9e356a3c0d7165c6d30677f0f91223d0d3b61a3e18a491ac041b58992eafa4262c45aecb9bde
SSDEEP

24576:noqgzoXiBFBJB6mK93Iy5nOWNzfD5m33ETfzgnd1cWTU3BffkUDyl:noZzoCLJB7K93IyFOWNzU3Un+d1cWTyT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c98302d571fb621bcc4a8cdeac3fbfe_JaffaCakes118

Files

4c98302d571fb621bcc4a8cdeac3fbfe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ