d4a200d4b478dc396baf4e6406b05b9f_JaffaCakes118 | Triage

Sharing

General

Target

d4a200d4b478dc396baf4e6406b05b9f_JaffaCakes118
Size

1.1MB
MD5

d4a200d4b478dc396baf4e6406b05b9f
SHA1

634289df87b77c17d65b96ce2587fe9c1a7c2d3a
SHA256

4ec0e70b0eb34e3327eb7c10e7365d4b3cc716973624769c3b84fc89275a61f3
SHA512

d5ab431d791b75e8038cad3e0e337c9a64845c649c4115d812cd931801d5102feb47c5b1e1c6d8d2ef12b0ace3ea34ad6ee73c354bed307dca0058be8a7b900a
SSDEEP

12288:b+d4xFDks/gdsj0hDU093NL4LCrX4g92ZSr0HuilKLbRQlQbkdqw+8BR7Z5:bikFd4dGgU0DELEsDOsKLb2d9hH7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4a200d4b478dc396baf4e6406b05b9f_JaffaCakes118

Files

d4a200d4b478dc396baf4e6406b05b9f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 541KB - Virtual size: 541KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 546KB - Virtual size: 546KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ