de4b9e5be9d490a9ace1af35ff4a1bc1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de4b9e5be9d490a9ace1af35ff4a1bc1_JaffaCakes118
Size

83KB
MD5

de4b9e5be9d490a9ace1af35ff4a1bc1
SHA1

d83b2b34523ddc60f670dd32cebeb03deb915498
SHA256

9ced58ded44981cbb02b423238a57b14394f8ac16810d090edf6d69c32aa628f
SHA512

421e6653dbf608e67c7f1b94680e7aa187f4dfa33ed92bc5b33d1dbea1a8ffac3bce3a93d7bef5b8f03543b1d0192ab445ee78257064044ad53c485f0abc7817
SSDEEP

1536:7YiyqEN5Qc+kzm4q0WlM2ByzGsT1IeQ0Cm+THUHHTr9lJB1eY8+CWeCs:7YjN5h+kq4qBl/cIdFmvHjUY4WJs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de4b9e5be9d490a9ace1af35ff4a1bc1_JaffaCakes118

Files

de4b9e5be9d490a9ace1af35ff4a1bc1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

62862
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE