4cc32c06528f35b7c051907d7f55222e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cc32c06528f35b7c051907d7f55222e_JaffaCakes118
Size

140KB
MD5

4cc32c06528f35b7c051907d7f55222e
SHA1

cddc3f4ec5d6e586ec7f1eb69f2573b9563ae8aa
SHA256

18b296f1d87f3eb2a05819e3a0d6ea2c580ea4f840951a1b0d83d2f8178b5a91
SHA512

bd6a10ec6fe6e693604831852fc7344860d65aec05929d7f2041db536d01eeeac528b7947386ae59dff611831ed513e755565d40d80cda0024116c713213d3d1
SSDEEP

3072:4HwugsRzhPWoqaLA0OYF9tpKgQBuEvEuMy0MdMF3apZms3Qr9XHyEDtMKioqh/:TugsEaVOWHKgIEhf3WoEE/iN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cc32c06528f35b7c051907d7f55222e_JaffaCakes118

Files

4cc32c06528f35b7c051907d7f55222e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 24B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ