4d11465e1b1f6c6e30aea7020a825169_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d11465e1b1f6c6e30aea7020a825169_JaffaCakes118
Size

280KB
MD5

4d11465e1b1f6c6e30aea7020a825169
SHA1

e7a97fa49171ac3abc34eed51776d4a621d465db
SHA256

16bce01179838cb68c311ce0fa43342f4e70b9fe0481d2920d01010d06880306
SHA512

e3b78804e78fccd83b3b403fa80699c0de326cdd756ac56a7680a88cb7c67afd9f4974f47540dc3d040cd2b587b71d9f061e3ae0471f753f1adbc5f415cff4eb
SSDEEP

6144:TSGF2l9CLK/fz6bs4XJaZDtP3N4d1fwkZosYYHvxKMK:TZF2vCL1bs4XsZf5kZf5rK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d11465e1b1f6c6e30aea7020a825169_JaffaCakes118

Files

4d11465e1b1f6c6e30aea7020a825169_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 893B - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.engine
Size: - Virtual size: 3.0MB

.rbss
Size: - Virtual size: 428KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.entry
Size: 276KB - Virtual size: 280KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 923B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE