b4591c87400ee8cf5cf9d83dcfb1ddcf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4591c87400ee8cf5cf9d83dcfb1ddcf_JaffaCakes118
Size

1.0MB
MD5

b4591c87400ee8cf5cf9d83dcfb1ddcf
SHA1

f9e1f43f45ee586e2c3817bd870b8ab5c17e4826
SHA256

472c27e603d7fb2fc04f5962e36e17ec32a657edbb7a434fc106280fbd0304cc
SHA512

8ad6fbcdbdf299de99bd510a7d3631e0f215d68d88d91e6aaa0221605ce26b4f2dca416fbdc811f5b64acb218449b35eda37fb2a6656b3f81c84feb9052d210e
SSDEEP

24576:jwIjc//////YhXrZb+qbz81Fkkv5fx/ClxRJ8rQU7INPQMV5:USc//////YhXrt+qFiDwFfU70fV5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4591c87400ee8cf5cf9d83dcfb1ddcf_JaffaCakes118

Files

b4591c87400ee8cf5cf9d83dcfb1ddcf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

madTraceProcess

Sections

CODE
Size: 901KB - Virtual size: 901KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 82B - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 236B - Virtual size: 236B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE