4cbed73999a1c79bdc0566a28bebcf73_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cbed73999a1c79bdc0566a28bebcf73_JaffaCakes118
Size

196KB
MD5

4cbed73999a1c79bdc0566a28bebcf73
SHA1

fc43a7020ee1305b95cfbfd44262e612d2db2adb
SHA256

4f03167a28df050e4ef826b21f55ac7689f615b7b6c6b7a635c5f66580921959
SHA512

bd7cd2a9a0e88700d7752e2cc7acd1d57e8055dc22b99b2ec224461f7f139ecf0496e34b87a76d4dbef00814b98c20bba18c36dfd9b429cdef5fa6ea93559e16
SSDEEP

3072:ksTu2CGvzj4xzhYVbZwrDKXjRmZY9TBfQsiC:5Tu2rzja9OVjRmZY9TBLiC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cbed73999a1c79bdc0566a28bebcf73_JaffaCakes118

Files

4cbed73999a1c79bdc0566a28bebcf73_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 45B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ