047ae3746131c882ca28eaf612ef8940_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

047ae3746131c882ca28eaf612ef8940_JaffaCakes118
Size

775KB
MD5

047ae3746131c882ca28eaf612ef8940
SHA1

dede5f09541952500e0b7217110ab4e13f693cb3
SHA256

ce5c02ce3440ce65ea1a089baa3cc8c6f0da28455e54294b14c84329e697b191
SHA512

c9ccb185077e5c5337151a20be417e67a5818f8b1541df77ce19d890417328ac8e617a0f962bf03c81bde914726bf1017c76063aee9fd7f0ef6560ccbfcdcf0e
SSDEEP

12288:DqIqmBqxv4gYHYxcIiO5mAyvn0+R4JuUaUNULfpQzdIK/scSfyhmbG:DHqz4h4555mpv0+guDwUpQpkchmbG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
047ae3746131c882ca28eaf612ef8940_JaffaCakes118

Files

047ae3746131c882ca28eaf612ef8940_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 668KB - Virtual size: 667KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ