ac4a48770b14b067fee1b89c6cf42611_JaffaCakes118 | Triage

Sharing

General

Target

ac4a48770b14b067fee1b89c6cf42611_JaffaCakes118
Size

217KB
MD5

ac4a48770b14b067fee1b89c6cf42611
SHA1

cd1b273cb013c73d3af92a74a0aac9b15152e4aa
SHA256

a209b805e425ff789642890cd35d07539c7ef76dd3294e69becb7fd47f3bacb5
SHA512

f9398e6906532dcaa603a2361bfc127a1ce4c407735c8d16afd5360372f292b50bdeb99067e5d0c85bf73bc94acfb2406ebb1bd4ec99c6baed946996aeae739a
SSDEEP

6144:R1n2GkIowqifuDLZpuHK3p9nMn/KLKsTV4VLRr:RF9k+xfuD1AqZoWvVKp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac4a48770b14b067fee1b89c6cf42611_JaffaCakes118

Files

ac4a48770b14b067fee1b89c6cf42611_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.2ffy$d
Size: 1KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bijs5$
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l0fv5$
Size: - Virtual size: 720KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qvrqfm
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 3.0MB

.tss
Size: - Virtual size: 444KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rbss
Size: 213KB - Virtual size: 216KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE