4d3a5262113387c440dc9464058d4935_JaffaCakes118 | Triage

Sharing

General

Target

4d3a5262113387c440dc9464058d4935_JaffaCakes118
Size

371KB
MD5

4d3a5262113387c440dc9464058d4935
SHA1

6cc617dbfbd3f5daaec974e28205279e1b866983
SHA256

22d2beac7273e226258277b5d9163d2db78d33ca331c6cb6a9e17b73699b18b5
SHA512

e429f0d984f9adb3ea056d21454dbc9dfa8b3c6822925440b8c7ef682c99af07309d511ff4d1425aa4a36215f06493a9510e4bae59cfc71fd507b9196b5d2ab3
SSDEEP

6144:SqF6Tp9xmDWiiua/IiY8ciKmhuli7C+yQDB10CwKra+vkj:SqF6gDWERyuI7C+1mCLrm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d3a5262113387c440dc9464058d4935_JaffaCakes118

Files

4d3a5262113387c440dc9464058d4935_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

packerBY
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bero^fr
Size: 367KB - Virtual size: 367KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE