4126946cb698d1621cce03c9b36a5661_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4126946cb698d1621cce03c9b36a5661_JaffaCakes118
Size

408KB
MD5

4126946cb698d1621cce03c9b36a5661
SHA1

6694bd1ccba2c0244da963375beb915db5bb65cf
SHA256

4d2da378cbe51c4007e2b74f36c90ac4e668bed71abdaf2ce81372022281a02e
SHA512

167c1e5c54e6218df48b459173d76ef3c78ab4d8ee526dcb68506a456b54875de6e5cbe82af946a2ea1a2c09f05d6f4e16d8f25798fcc03c78412c00f34e6143
SSDEEP

12288:p+i5071FxMd4cyYF6ItTF7gggoMMaQKTNHed7Zu:peXxzc3cIbgggLFRGs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4126946cb698d1621cce03c9b36a5661_JaffaCakes118

Files

4126946cb698d1621cce03c9b36a5661_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 363KB - Virtual size: 692KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 222B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ