04bf0fc62f8936b7324fa14dd8fe7830_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04bf0fc62f8936b7324fa14dd8fe7830_JaffaCakes118
Size

144KB
MD5

04bf0fc62f8936b7324fa14dd8fe7830
SHA1

5cc1063a56107f03e2a1e4769ec4db234f06caf4
SHA256

e9c4f14ec04ebd67c3490d0bdb57ff552c8634b6b1783d69475ae9f6e669aec7
SHA512

d87ad82c08c04e089fb4e9d4399cc7ecf6dd35cb57fe8ecb47e2a5d9ea7af0cd41ae91ca2b81ea238c32b7492642442478d7fe969c806a85b4b792699b70d301
SSDEEP

3072:r3AG3kmvjuKL6Xoiz074zAjb4YjmBA67RqK3UXwueYkO:UG0mvK0izTzAf4Yjmm67AUu5kO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04bf0fc62f8936b7324fa14dd8fe7830_JaffaCakes118

Files

04bf0fc62f8936b7324fa14dd8fe7830_JaffaCakes118
.exe windows:7 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.one
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.null
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.void
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zero
Size: 1024B - Virtual size: 895B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 96KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ