4e1e328c27b6312c918d680a21096d01_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e1e328c27b6312c918d680a21096d01_JaffaCakes118
Size

297KB
MD5

4e1e328c27b6312c918d680a21096d01
SHA1

9a0548f8d6f0d99fea8ae21c59944c84ff558092
SHA256

14eadfe92f5f8cad456cd0b69424079410c962cdac0a0508655cf311c21573d8
SHA512

e2a10050f77f0414d5ab279567bc6dcb5a260f36311df0aa9b0cb04a237c71a63e8b185d3686916fdd7384bed646d63103f07d4b95864857cd16180d783527fd
SSDEEP

6144:e5sEGsNwNamnGcS3nCLlk7x56hhHx8SKKhJ95zjS51CgiS1zirY3jRP5n:UVcS5xmh7KK/cUr8P5n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e1e328c27b6312c918d680a21096d01_JaffaCakes118

Files

4e1e328c27b6312c918d680a21096d01_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ