4df8018f9ab755883b45c03a9f2986d1_JaffaCakes118 | Triage

Sharing

General

Target

4df8018f9ab755883b45c03a9f2986d1_JaffaCakes118
Size

48KB
MD5

4df8018f9ab755883b45c03a9f2986d1
SHA1

7c57a89a607cc4f071cdd0d92e62ccffd934aedc
SHA256

ed29b11aac9a027e86d77d201415c02cc0faa09c186d212fa0d447ee1b59ebd5
SHA512

decc98412b4e149700dfbdf18d002323c446b6e530e336b2f97d4701ea67f35dfdc388f5fb68c80091bebdd7d1275bec4d43c011ca39fa88df29b81930cb8718
SSDEEP

48:0P0Gh7bcxBz8F/AdqEGFBUPrnelI5nzjDi3Yl1uAjaLDv0SmJ/rZs0vAZ/W6m:0PHUza/AgEGFB4JzviIPuAjKDxMI/WR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4df8018f9ab755883b45c03a9f2986d1_JaffaCakes118

Files

4df8018f9ab755883b45c03a9f2986d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 6.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ