4decd42ab4592440ffa73a0c8aaa39f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4decd42ab4592440ffa73a0c8aaa39f1_JaffaCakes118
Size

2.3MB
MD5

4decd42ab4592440ffa73a0c8aaa39f1
SHA1

2af6acf916c08b699a3c7cd993f46d33067ae609
SHA256

172d07201383bb2683a80ff335ef4b5752ff86824fe2362fa90b9f5ed7fc016d
SHA512

6e623ba75624aeb50f6f27c2b90ffd003a9cb78a972d5af0e93764968a45cb8ef69cc0bd212159b2e9516604d5a45e5529958e44921b322b3f274c52f1c5b9dc
SSDEEP

24576:wX6nmfJru79O4NULzK2hLmu5eKLtmuDB0o9ms9Cd579H5cDQifgHg+uAVXiO7J6Q:4JnXphLNVmuDLmRP7HugHbKs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4decd42ab4592440ffa73a0c8aaa39f1_JaffaCakes118

Files

4decd42ab4592440ffa73a0c8aaa39f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 665KB - Virtual size: 664KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ