4e0ddf3ef07375e669a7cb312a465b43_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e0ddf3ef07375e669a7cb312a465b43_JaffaCakes118
Size

103KB
MD5

4e0ddf3ef07375e669a7cb312a465b43
SHA1

ab545c6dc6053732311b4743ce4da2002fe857a8
SHA256

38b5f8b23758d1ebd8f43af9e41934f717f91e3616f94949408bca49aa310ed6
SHA512

c77a665328c0f853b448538d6d84e2dcfc91c99284592a9a42b99a9cf41472ec1945a7b76dfef5585ec7b26cfdde2fe9bc4fa37457cfdb9fb2aed3a03ecc3f72
SSDEEP

3072:BAzqy5+HEbZ1M1c4lFPicf+PbN61wq6BB:B2qy4HgephvkR61cB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e0ddf3ef07375e669a7cb312a465b43_JaffaCakes118

Files

4e0ddf3ef07375e669a7cb312a465b43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

dccfft
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ