c04885a4dfbdfd1e67fa2dae7c92d1bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c04885a4dfbdfd1e67fa2dae7c92d1bf_JaffaCakes118
Size

616KB
MD5

c04885a4dfbdfd1e67fa2dae7c92d1bf
SHA1

aaff4c02b9d18e0604106c3d6c9f6cc8e8acf19b
SHA256

b65df80cd58306f74a9e7fe69af0d6be4b65d56d6f5c09b530347962a6b47242
SHA512

75fbc22e36bbef568242679bea18a2eac2cd707fd61b27735f67b57a0aab8679be0db88918e56dc9e6dba4de33d8e6aeac14dbfd554d4ad6c19457ecfb1c7fd8
SSDEEP

12288:5HKj3w2D114MuX/kzHKxOziIU7vxLScjgUH2mXSS9iuLy:ZOXD1ok+RFNLjN7hHy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c04885a4dfbdfd1e67fa2dae7c92d1bf_JaffaCakes118

Files

c04885a4dfbdfd1e67fa2dae7c92d1bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 417KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ