704b4abcd3bfbc16b78c5e8a4ebbd9bd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

704b4abcd3bfbc16b78c5e8a4ebbd9bd_JaffaCakes118
Size

2.0MB
MD5

704b4abcd3bfbc16b78c5e8a4ebbd9bd
SHA1

3423c3bd8632c12e816f7de641b804e7757a6274
SHA256

425266b3f08348d373311be9faae922671397969ec4c577d23f937bffa672651
SHA512

d24b59a09ab057626bee3aa6b3346f45e8c93dd67ba4126f296080aaad2427b7f2208d8adaf908d98ca7c43398268014da4788b5413ab835732fa1c5aedf050b
SSDEEP

49152:rtxY9doBktEtul03qAKAHC8+KpFlHutBZI7VplY:odoBkatul8iX2HCBATY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
704b4abcd3bfbc16b78c5e8a4ebbd9bd_JaffaCakes118

Files

704b4abcd3bfbc16b78c5e8a4ebbd9bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.textbss
Size: - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ