b4afdb9e3a5802e2d6321f294b0e2486_JaffaCakes118 | Triage

Sharing

General

Target

b4afdb9e3a5802e2d6321f294b0e2486_JaffaCakes118
Size

52KB
MD5

b4afdb9e3a5802e2d6321f294b0e2486
SHA1

d37f0f1e87862575afc457239064c6bae0ee86eb
SHA256

69a0757c13c5dd095d71b6a548f61369b9a2a93952a234c8caa76cdbe2333482
SHA512

ebaafe57ebbdfb7117a57620a39ef2a89d23d51ac8e304ba8172f6a49526562f9fb71f51a22575345bba0b78a9c25ccfaebd7f7e5eef6ed06fb4ccc0e1a5c645
SSDEEP

768:L1S8PbYng+rn/G6KC3/J67PpZDFftBM8kUvxcCNNsbl29V60D0axI:LTbYglHqJq1fY8PvGomUj6i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4afdb9e3a5802e2d6321f294b0e2486_JaffaCakes118

Files

b4afdb9e3a5802e2d6321f294b0e2486_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 597B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ