4d59b3dc0692b1f86aed840207dbd46e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d59b3dc0692b1f86aed840207dbd46e_JaffaCakes118
Size

208KB
MD5

4d59b3dc0692b1f86aed840207dbd46e
SHA1

035e528a25bac24443d202d2be36be5fb76e1b83
SHA256

87d29eb1006d90b88ef7f3fd20227b60261029167d67a7ef3d17093ae2363694
SHA512

94eb25c88e8cc3e961fb193ec5a58f72c6aecda1ab0d075b680ca54130e0deca75a6e4af5c8667741b473d7d3f266a7c8e5f062d6a8d255bb605fd58fc0c3549
SSDEEP

6144:aWWkASeuhvzekqKrpj4hXIKXzfin3r8itQXH0IdZK2s:GkAS1hLeKFeorzKHBC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d59b3dc0692b1f86aed840207dbd46e_JaffaCakes118

Files

4d59b3dc0692b1f86aed840207dbd46e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ