4228ee5e97530e15fdd3eca796ca96d2_JaffaCakes118 | Triage

Sharing

General

Target

4228ee5e97530e15fdd3eca796ca96d2_JaffaCakes118
Size

510KB
MD5

4228ee5e97530e15fdd3eca796ca96d2
SHA1

c07d108f2baa03a725b93692ea453674e8531d13
SHA256

df5cb3dc809f3b20a3c773e80d14ea86f5f1a407dac2a580684bdb62592ee29f
SHA512

539334fae49c7c04dd19103ac373a9ee7f6b76419b86b03b7c9f4fb2a356064e9730fde5c6ad486807e664b70d00844148ae2939be4963b7e524b5605342f740
SSDEEP

12288:jr8Qf4zOghhmjErzJP3cNF/3V3aRYy36WnrMQgElNqnEs7hJ8:j34zJBA9l3R2MvEjqnEx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4228ee5e97530e15fdd3eca796ca96d2_JaffaCakes118

Files

4228ee5e97530e15fdd3eca796ca96d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 2KB - Virtual size: 736KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xq$jgb
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ub56fc
Size: 15B - Virtual size: 15B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 699.0MB

.rdata
Size: 502KB - Virtual size: 504KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 64B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE