4dea66ba11096041cebb3875063df546_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4dea66ba11096041cebb3875063df546_JaffaCakes118
Size

123KB
MD5

4dea66ba11096041cebb3875063df546
SHA1

678f58673f3324015170a0bf90a10648ce57c849
SHA256

a78880de8601fe112880cc2d318ba1ad36b7e879661609fe60d4e22069047aae
SHA512

ab31371428c554a37cd8c9415bfa1318afc8e193afbdcddecac1dc0af92940550a1f11b25cf16ebb3832761f007f6ec9c19a365dc36e701bf7d2c0de84a81415
SSDEEP

3072:s1vjutlLWIXxnH+ypSXBKBlJp2lxFW+Vz/geX:sFjBIXVL0BiGQ+Vrn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dea66ba11096041cebb3875063df546_JaffaCakes118

Files

4dea66ba11096041cebb3875063df546_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ