4d3f05b4e1b472adeac7befcd5d69a4a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d3f05b4e1b472adeac7befcd5d69a4a_JaffaCakes118
Size

343KB
MD5

4d3f05b4e1b472adeac7befcd5d69a4a
SHA1

5ddb49eca9973655488ea29f4d69b04d8bcd2bf2
SHA256

3185a1e27b8e4d5d02e344a0f09c659ef5f0213dc6150b931a4941007ffacb55
SHA512

405244663bfcb4d1da83fd9a172e30168ba9d93ee6dca7ef45042cd6054c181891d9c8fd0b5f789b93f52cc9dea953591551da31c8fce0578e0ffae2ae95b36e
SSDEEP

6144:ueQ1DrV3hqiSG//SX14nn7poaCP1AxP94CnVTArAJUTBzQvMZ+CV:8trV3hpSsiu2Ch951ArYUTCxs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d3f05b4e1b472adeac7befcd5d69a4a_JaffaCakes118

Files

4d3f05b4e1b472adeac7befcd5d69a4a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 271KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 59B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ