cf4c6011e4adc8e7fa7abedd5b52ced1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf4c6011e4adc8e7fa7abedd5b52ced1_JaffaCakes118
Size

4.4MB
MD5

cf4c6011e4adc8e7fa7abedd5b52ced1
SHA1

84b2f5ce2c15fb1674a88c6e5036a3806ab610e9
SHA256

2a9e7ee417ffa1112f3a810bbaa6c029fd1d2b136d5fb3bc04cda71afa19ac74
SHA512

05e2d435198b8179c9a5d0755d17a4bf78e4947103267870008d7fbceb47ed34d70b90afc37a3ece8fdf1eb9052bf90ef64de1308d106a1e0f200306d8f47a8f
SSDEEP

49152:B02EIywrvQsQDggKhDUE/IZdh1/TnMSFHgB+lB:B0h+rQsQDggKhDUE/Yh1/lFHgBI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf4c6011e4adc8e7fa7abedd5b52ced1_JaffaCakes118

Files

cf4c6011e4adc8e7fa7abedd5b52ced1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 539KB - Virtual size: 539KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ