4d3aba1e393006bad6ba0831b79d9dee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d3aba1e393006bad6ba0831b79d9dee_JaffaCakes118
Size

50KB
MD5

4d3aba1e393006bad6ba0831b79d9dee
SHA1

e71f6ef72025c120d8b712e6a089b6648e811936
SHA256

57925894259692db80cd673ab9f8a51d1e2966d9aceb2032e6331c8e68851ff9
SHA512

4ebe73674ff87bbda555f52eb5f31e5ddce3edee092496cb00d34dda07a2d9867cae73e4f7990ec5a654d765cd44cb688476e578f847af3ee05acacd5d36681d
SSDEEP

768:uD7IjJwOiJgZkx8Pw6RATVmHLnAnfahV9mlw6Xor9kCdO19Aj/hClLCMNZ3:KoJHcuw6RAUrAnih76X0k965tMNZ3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d3aba1e393006bad6ba0831b79d9dee_JaffaCakes118

Files

4d3aba1e393006bad6ba0831b79d9dee_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 257KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ