b4cd0be2ed395b7454acb09e4e37ded2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4cd0be2ed395b7454acb09e4e37ded2_JaffaCakes118
Size

66KB
MD5

b4cd0be2ed395b7454acb09e4e37ded2
SHA1

224d55d22b6c431b7b843bf14924c3eefdc598cb
SHA256

c6d59bf547d09ba87b82f8f083fd4633a5d684e5c2961be6a0cca9b2682c5f84
SHA512

a37c5b68e65f28fc406c55f53d3b15c21d0d606a60c8e5647e1db636a10ed78f5c27ab0c3651c7c62e3cf4ecb436c5f9b3a1636ab4d18102e76051a7ab31b61e
SSDEEP

1536:wGDUchfXbZ0aeb90jaC12E4LHkYfTLbELV:kchfXbup04LnoR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4cd0be2ed395b7454acb09e4e37ded2_JaffaCakes118

Files

b4cd0be2ed395b7454acb09e4e37ded2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ