b46d4ce51ae0630fcbbf2823ff63562e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b46d4ce51ae0630fcbbf2823ff63562e_JaffaCakes118
Size

2.1MB
MD5

b46d4ce51ae0630fcbbf2823ff63562e
SHA1

b7c26686b977274cbf91753be28b0cdf3403518d
SHA256

5714c6fc7ecd81706981c224c1a93784490b08addc5238ab54d957eb31df82bf
SHA512

66023b426e0fe4b9158505c7498e51c30480ed52bfc759e12ac25a44ebb3ae048388da972f9eb5a5bdaec4ab0bef961d5f40d93292b41103e91ad17ab00014e9
SSDEEP

49152:5a0j52P9EBitLCLfD/GKIXjnArv/k6eQiN81inXBgJ:QMkZefTCXjn8v/kSiRRgJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b46d4ce51ae0630fcbbf2823ff63562e_JaffaCakes118

Files

b46d4ce51ae0630fcbbf2823ff63562e_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ