4d832fc57b1ab21be8f73cb91a7d5811_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d832fc57b1ab21be8f73cb91a7d5811_JaffaCakes118
Size

22KB
MD5

4d832fc57b1ab21be8f73cb91a7d5811
SHA1

1a2ffe08cf2a59e8815f1123f37c7b389acdda12
SHA256

cbbf3264982a1570bb68cad0fe59832fc575ecdf82208b59d1495ed69e203f09
SHA512

97ec4c84b2ce1ee88d327cdd185d41922e92243bd959d943448b82611520b91aaa5d49f5973b356fe9735e621eeb0fc4af19d82a4616bbdfa2126f436f343db8
SSDEEP

384:D3YXyv70yf/2tFAeScYL/8gZTqV3bLfXruCmlANdFU53JDUXbZqyLiTda3eUSSOR:zYRy3gScYrjZTqV3b7XruCvN/OU9rOgc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d832fc57b1ab21be8f73cb91a7d5811_JaffaCakes118

Files

4d832fc57b1ab21be8f73cb91a7d5811_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 756KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ