04a36e68bba3cfef080c9796e2b7c8ad_JaffaCakes118 | Triage

Sharing

General

Target

04a36e68bba3cfef080c9796e2b7c8ad_JaffaCakes118
Size

57KB
MD5

04a36e68bba3cfef080c9796e2b7c8ad
SHA1

2cd483d49665c600c88e951d4be49b01733fce93
SHA256

2495dc954860dc92ae7504a13eb849faa19a7a1b29751a8572cdaf595b7b5ecf
SHA512

5b2e9f2cd8dc778c1664b7262dc5f54b48ba4d1fbddecd6e3b3bba81899277e4686f96f0e22ed09e301a28c0b8d12202e1bec11e9f1102298ada595aabfa45fc
SSDEEP

768:tu88JmsOFMi3tYn0dlD0PV4547xSRAWa89wIoLDXDTRFtDKCzbxDtjx2A:tuXmXW0/QPV45SMWxLbtnxTH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04a36e68bba3cfef080c9796e2b7c8ad_JaffaCakes118

Files

04a36e68bba3cfef080c9796e2b7c8ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ