046aa835ff6395be2d94b3acd5ef8715_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

046aa835ff6395be2d94b3acd5ef8715_JaffaCakes118
Size

177KB
MD5

046aa835ff6395be2d94b3acd5ef8715
SHA1

96bce8965579c22fc6f15802bc9a060e4970443f
SHA256

6b555d5b7a87750c0eb936d2b9a50d9dc6e3fd91e3cf0f15fc4a076bde124e4c
SHA512

1653b08a1e75d79019bfe491d8a651d2414fec26f01f1fb3e1df8b140e1252e5c52500ac019bd4baa64e1ea3c17b16e85418df2ce3078842983318addf98c29e
SSDEEP

3072:1igBB19pW0dcTFHhHTko/fKXhTlY/kwwEb:MMBvRCJZTnfYhOFws

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
046aa835ff6395be2d94b3acd5ef8715_JaffaCakes118

Files

046aa835ff6395be2d94b3acd5ef8715_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.Upack
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dswlab
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE