4d0cc084ca20e1fd20936cc39e047091_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d0cc084ca20e1fd20936cc39e047091_JaffaCakes118
Size

2.3MB
MD5

4d0cc084ca20e1fd20936cc39e047091
SHA1

6010049be43c2336b918e452504d41163191342d
SHA256

dd4856590b15c76669caf14695ce1f739687bb471196565d14cee22df525fa4a
SHA512

cd37fb2c344c228bc37963b6cfe2c03226c73557ebca38232592935157b6289caec305a5df21324b43d705ada639bf1e22b81e2ef2c64b2b040a0de1a0804dec
SSDEEP

49152:gGK9hK4ocTIswr8xRv/A0BtV35ySRvfPGW5MXDH1W4:gZ9olchwrYRfBtVJPRP/5uH1W4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d0cc084ca20e1fd20936cc39e047091_JaffaCakes118

Files

4d0cc084ca20e1fd20936cc39e047091_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 468KB - Virtual size: 467KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rol
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE