4079f186d586ecb1273d86df60639a96_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4079f186d586ecb1273d86df60639a96_JaffaCakes118
Size

112KB
MD5

4079f186d586ecb1273d86df60639a96
SHA1

927c0a05dbfe8423b89313fc1956d0e4d58c0b0d
SHA256

a95fa2b20f714f9913c061b5e72a4361b0a6f79d79cfc7867af48d5408909d86
SHA512

c7e84b3ea95c507f75d8126901ec37f5316fc2e36c9399bfe888df11e911ed527843703dcabbd24c215b7a6adca8843a806863343db6255412eea953034aee43
SSDEEP

3072:QHMgjqRFiJUMWGNTEzVIlT0Jr0fXzthxmi30AFIb:C3yVIB0JrsthcT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4079f186d586ecb1273d86df60639a96_JaffaCakes118

Files

4079f186d586ecb1273d86df60639a96_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.re3oc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ