b4950c59ff4ce8c8dbe040a89f277f54_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4950c59ff4ce8c8dbe040a89f277f54_JaffaCakes118
Size

57KB
MD5

b4950c59ff4ce8c8dbe040a89f277f54
SHA1

68638a3db785321646a9539172a00927a5a7a26a
SHA256

779a8c0f855742c983e5431d7c2bd87e66808d959c05be56081adb1bcc50c528
SHA512

4065584934b93525fdc5a7be885f13577a73a605cfbe3f72d85bc4c803f00f99055f2e21e06d6947630490062a0d434d9572aaec52fa37372422335d45849f54
SSDEEP

768:4MCXb1xEdJGkGah4BTBb4orPLMKaMjJIkYCJa63mDzA9yg+pudwTazHMz1Quwc:kRy+kGahIBd/sMBYC863mDzEbgkc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4950c59ff4ce8c8dbe040a89f277f54_JaffaCakes118

Files

b4950c59ff4ce8c8dbe040a89f277f54_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 45B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ