a4a99a238da649b8fa477b63bc9d7880_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4a99a238da649b8fa477b63bc9d7880_JaffaCakes118
Size

646KB
MD5

a4a99a238da649b8fa477b63bc9d7880
SHA1

a87ffff89f1911e68c8a70da74b1f95ff919b5b2
SHA256

9e4cfbea95c77a81dae13fe4d5c7a541926f83ff70f723157a6fef5886667cad
SHA512

75a3006670ec97c8f88d93db5ad2b3fe9f91a1fc3f072645e3ab28492d1b71936d58add8241195399ffc6a63a67203b6d13dd6e06b4859129817ba15ae07821c
SSDEEP

12288:IvL/KtK3KY4Rt40o46UFDaSBW+99/4MjIQGinm6QcI2fGkl+6NsM:0jKtK3KY4zfW+99/BIQGinmK9z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4a99a238da649b8fa477b63bc9d7880_JaffaCakes118

Files

a4a99a238da649b8fa477b63bc9d7880_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 627KB - Virtual size: 627KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ