4dc044437c9e9d2589d2ac7cdd5c4451_JaffaCakes118 | Triage

Sharing

General

Target

4dc044437c9e9d2589d2ac7cdd5c4451_JaffaCakes118
Size

428KB
MD5

4dc044437c9e9d2589d2ac7cdd5c4451
SHA1

729c01103f2a5765f1086e753f1a9dee149fa2ef
SHA256

d1fa44a00154c21864f3cc1daf746aeacc2689bdb97d192e3e36182e06ac6aab
SHA512

704dbe3485c546e9189359a406a4d5aa649d6aec7790a3955a5ff7f5342dc0047f06b7809603ea00a6ba2c31551bd7001e45ceec75e668a574327b51269703c7
SSDEEP

6144:0P0X9nXc9xJKIFKJY8h0yrknbBAtJ7qCin8V1eXAbUeo1+LW:lX9M9xIARyrSgJ7q+V1uUU9j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dc044437c9e9d2589d2ac7cdd5c4451_JaffaCakes118

Files

4dc044437c9e9d2589d2ac7cdd5c4451_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 268KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nah
Size: 899B - Virtual size: 899B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ