4cdad4ea9ae926bc4f369d52e8b127db_JaffaCakes118 | Triage

Sharing

General

Target

4cdad4ea9ae926bc4f369d52e8b127db_JaffaCakes118
Size

538KB
MD5

4cdad4ea9ae926bc4f369d52e8b127db
SHA1

ea1c590890c28719eb8045c7ba336e944a286d5c
SHA256

34a9efeb7b6eda9f4635597dbc096bfdcd5da7eb8e63dc6a2025e25b73ca881b
SHA512

8f564c546d6fe6a5f07ec7d0459e0f8cb7e259bd85bfe0176bbf262f946000bf106ee68fbcf9f52688081a5ef527d2fb8ad56d09030585a3c4106a22b1cc0bf5
SSDEEP

12288:7raepSMZpe26zfs25lRL0Ktu9w4xeWMwxl:HZwr26jNLeeCleK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cdad4ea9ae926bc4f369d52e8b127db_JaffaCakes118

Files

4cdad4ea9ae926bc4f369d52e8b127db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 388KB - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ