4d7ffeb1a7fc1ddb90cc12ecb96e0011_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d7ffeb1a7fc1ddb90cc12ecb96e0011_JaffaCakes118
Size

586KB
MD5

4d7ffeb1a7fc1ddb90cc12ecb96e0011
SHA1

2fa39b37313c172c8f97fd4badea373588d571ea
SHA256

b7b99ae63b7f48e598c3bd45c9dc27f18aca1ae345e3991a1f81524bd0be04b2
SHA512

9fe30e39461e93cd9afad89d5e4cc24cfdce219e8eb647ef2fec2cdddbb5290dcf4c75ae0fd8bb58204767116f22d958aad75de54545e273de0493d60d8d95a7
SSDEEP

12288:NtOSJpWFJj39z5PTLEo/83hUCsBfAnJ42wArr18RvU:Nt1Pc39zpT3/qRMom2wA6p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d7ffeb1a7fc1ddb90cc12ecb96e0011_JaffaCakes118

Files

4d7ffeb1a7fc1ddb90cc12ecb96e0011_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 505KB - Virtual size: 505KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ