4e110d79beab36cacbcf6d7165a8425a_JaffaCakes118 | Triage

Sharing

General

Target

4e110d79beab36cacbcf6d7165a8425a_JaffaCakes118
Size

807KB
MD5

4e110d79beab36cacbcf6d7165a8425a
SHA1

edaa88b3118e23ff258372a9b8649cdf0b02e677
SHA256

2dd942c1b313f9f6ed364a0ec4314b02b600c68f1ac7a9ceefc3720c7836a777
SHA512

eaaa57a5e5aa35016d36199d7fef0a23f2024bdd1946ab5fdc0111a33961297b78d6480978db91fcc07a9acd1e95ca61a41975a46db2cb191f2d872609c4bc3d
SSDEEP

12288:gwFEgKNNf/f6ioFzNDkKR4IvxgeboiC7IzwSlMs7MXrvNONInb/ztKSakYv:7EgQTINkp7IzwAMS0bNOQzz0yo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e110d79beab36cacbcf6d7165a8425a_JaffaCakes118

Files

4e110d79beab36cacbcf6d7165a8425a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 892KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 787KB - Virtual size: 788KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ