4105283469c334d7f35a97a24dfb9af2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4105283469c334d7f35a97a24dfb9af2_JaffaCakes118
Size

600KB
MD5

4105283469c334d7f35a97a24dfb9af2
SHA1

b0481935c1f390cf6e1b0ca59ae2bd30773f97de
SHA256

6736889f8c4b8b20acf18704d7acbbc902b6916badb4e9c6988929b67cc46432
SHA512

980809ca9eb259693896a1c4967964398aa327f3b1803f2e320bb2e96623ef0fd5548cdb86e3f0fad6d6fee1325cc124a729a2b116203c43b4776ea85945e966
SSDEEP

12288:t+CLi/YPcY/Yu1Iva6n7axcQJUqtNZIqpV9GEacV:sSiqcY/tjQOWQ+qtNZppnXV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4105283469c334d7f35a97a24dfb9af2_JaffaCakes118

Files

4105283469c334d7f35a97a24dfb9af2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 438KB - Virtual size: 438KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ