b4a82cd3383a5ff480183fca1b77636a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4a82cd3383a5ff480183fca1b77636a_JaffaCakes118
Size

900KB
MD5

b4a82cd3383a5ff480183fca1b77636a
SHA1

696479cf170c70edc4474a262832dc4a81960b7b
SHA256

060ea7ee16a53daa39163d8979733786a1e4ef9c07c92ddf92c3ded7ba1a6a0b
SHA512

fc401fe3a499bb03de7244b8a5c99486d36f4583907a3eca2f3adf3ab22cb9d6ba1e5caa448310431dc2a3a57cbd445984a52dc194318fc7c2a22fb3d226cb78
SSDEEP

12288:DzeNuRkS9PoA9u2G346gBncDiizuzHLVN93Ypk:vkuKwon2ncDN6rbJF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4a82cd3383a5ff480183fca1b77636a_JaffaCakes118

Files

b4a82cd3383a5ff480183fca1b77636a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

t:\xdocs\x86\ship\0\regform.pdb

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 653KB - Virtual size: 653KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.jgd
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE