04d993d485169dbb1ce7caa30dd14f71_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04d993d485169dbb1ce7caa30dd14f71_JaffaCakes118
Size

3.5MB
MD5

04d993d485169dbb1ce7caa30dd14f71
SHA1

5ab69466eb171578a2b1956f17a6fa050c428db7
SHA256

fbe622e5239bcc1fbc55f2d3b11f5520bb49ebe63e91ba14b61db0394bd175ac
SHA512

863884f509fa1aa76ebd55598b04eede39faf63909055410616377d99263cb746d9ebfd62fc7f1cf4f4c8b38a4691e51972d9f690c19ab2461f78f709ee02854
SSDEEP

98304:HlC1NAXn7VNXJgNn9wYNWPvuaXGvLbfUSij8cxS:HlJJijNWPT+L8j81

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04d993d485169dbb1ce7caa30dd14f71_JaffaCakes118

Files

04d993d485169dbb1ce7caa30dd14f71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 844B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 74B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ