4002930db05c39ad738b3a7cd250b15a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4002930db05c39ad738b3a7cd250b15a_JaffaCakes118
Size

907KB
MD5

4002930db05c39ad738b3a7cd250b15a
SHA1

4b9d3ea3ff8d346e665b6527a6c58bb518312568
SHA256

90a6bdc60705a1cfb5c0f3d0633ab261a587c3f6be95cbf810a284b9637f1d7a
SHA512

d0ad33cf7e01bf72e0fb0bfc7f2da42efc6a1b487ccba07b7c7a31fbd0920c1255c6b2576d91033b1cb2abc71b62bf1e5f395798fab7f9e66316dec8a6482cc5
SSDEEP

12288:71SQXKUDd846LeAIeQw9gDgX8asea5HkmOith785jWU1bjjx:71T76LDIeQw1bnMhnj85SU1bj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4002930db05c39ad738b3a7cd250b15a_JaffaCakes118

Files

4002930db05c39ad738b3a7cd250b15a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 481KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 373KB - Virtual size: 373KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ