aa4d0d4a0be716148b2ccfcae8ccc980_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa4d0d4a0be716148b2ccfcae8ccc980_JaffaCakes118
Size

705KB
MD5

aa4d0d4a0be716148b2ccfcae8ccc980
SHA1

0b878302ec6171fa13d03cbd9514808d4ae82ba5
SHA256

4c11d3e950b2c36e7edb41f84df552b30bbf9d960462d0e81fc2cc62df7358bd
SHA512

9568c57d0148d4ddc980f1247719c056d6ba1b3676b5fcf7b47aa60d6f26ba10549eca821d29722b1125c6b1aa3480dd9f84b741005e7853cba7cc3bd2ec3a88
SSDEEP

12288:ktrm4rfi34GjPbu1Oy2zW+qrWOq0uT8xz3y0zJvSSWMHMm6C:kJj84GjPbkwWrWOtxuuYSumD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa4d0d4a0be716148b2ccfcae8ccc980_JaffaCakes118

Files

aa4d0d4a0be716148b2ccfcae8ccc980_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 603KB - Virtual size: 602KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 24B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ