b44096dcf344e0bd88fa7f827579134d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b44096dcf344e0bd88fa7f827579134d_JaffaCakes118
Size

854KB
MD5

b44096dcf344e0bd88fa7f827579134d
SHA1

42fe6bba7e62edff118546d6dc33095e33ffaa63
SHA256

92c58625fbdbb96616464d2936264d7526d93066cc706e3ff22e83ab79e0705e
SHA512

2c385f3e26badf96d4054d193b6994b6d5df562bb731debf6b43d8a03f1974888c7cf5af4bf16ada962d28f46c32b3d9c9a2736dfc9278e448e63097b864c8c6
SSDEEP

12288:rIgeqlOA9HHZFNWRHhwp0awrc3CZbGWjF1nBcQk6nDMuClyG4oJjP4:roq39H5WRHIKhZ1fk6IplyG4Kb4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b44096dcf344e0bd88fa7f827579134d_JaffaCakes118

Files

b44096dcf344e0bd88fa7f827579134d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 778KB - Virtual size: 780KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ