d4a0b3f0ff0c4d6cce9450ccc38865af_JaffaCakes118 | Triage

Sharing

General

Target

d4a0b3f0ff0c4d6cce9450ccc38865af_JaffaCakes118
Size

1.4MB
MD5

d4a0b3f0ff0c4d6cce9450ccc38865af
SHA1

431cabfae942f0a47d3cafffda756a98067c0401
SHA256

00d7c714f281e2abbe6669139871c3421830950b77be8b8f54333d7778d1dafa
SHA512

044dc0cba94f3f6c2de7f6d8f609bbf27123c7441a966c3c4752c71cf58ac1c45ab84a7a5fdc800fa20e1ad4d65d3d1f30a021cc2ac98af96d126b6662e2187b
SSDEEP

24576:jcqOflLbSz6d+ghTHHI+yQ8hG9z8Lve8VZ3R8dpvX7UqgdS6A+dgBEO:BoEyTHoC8i8C818XIqgYp+yB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4a0b3f0ff0c4d6cce9450ccc38865af_JaffaCakes118

Files

d4a0b3f0ff0c4d6cce9450ccc38865af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 736KB - Virtual size: 736KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 650KB - Virtual size: 650KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ