4daa046b26df96237b5af849aa3f11bc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4daa046b26df96237b5af849aa3f11bc_JaffaCakes118
Size

194KB
MD5

4daa046b26df96237b5af849aa3f11bc
SHA1

ac095a62e2b808f5339844cc4fb39cc0acae8ac8
SHA256

d39ca127dacbc97b6a6bf5c804dfed1a4689bafb36555862d089c0292ba37f91
SHA512

ffd3683f3599cd308f47e1203dabcac2744afb7c8c4c7098bf5f5521102e3a97ed4a831ee2d1e5d81af28f18c8cd6bc2f67c5399064cba4d6b0adb0e6913ee63
SSDEEP

3072:iG5WGo+6po1gIbiwWEuzzpj+cA/eq96oh/cjoHzn1zaPEHYl4Kwrp8:iqWRo1TkvE/96oZcjOhGcHYPi+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4daa046b26df96237b5af849aa3f11bc_JaffaCakes118

Files

4daa046b26df96237b5af849aa3f11bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 619B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 34B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ