4cffb300245917a5834e633bb44e8ab8_JaffaCakes118 | Triage

Sharing

General

Target

4cffb300245917a5834e633bb44e8ab8_JaffaCakes118
Size

145KB
MD5

4cffb300245917a5834e633bb44e8ab8
SHA1

302a6d8beaddf9b9f023aa625305a1a96419dafb
SHA256

471d02becf92a80963c157c8d46b46b7d026d3884661adc3f1a41b21f4db7398
SHA512

db1e4c830ac596fa57428377de306c0d9d6f023a28d41c65210f25562292b3c21f38d150eae98feb3ba5f0d29ae9836658ee60a5bdf890b557869b6a028621ac
SSDEEP

3072:PZDVqkt6UiWcL0sE0o9ZklCK6dXSy0sbY:P6k8WZR9zXS7s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cffb300245917a5834e633bb44e8ab8_JaffaCakes118

Files

4cffb300245917a5834e633bb44e8ab8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 41KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.perplex
Size: 41KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE