4477167a6a18c09b4155267e2275d830_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4477167a6a18c09b4155267e2275d830_JaffaCakes118
Size

35KB
MD5

4477167a6a18c09b4155267e2275d830
SHA1

93c271824d5b0443f8dafdd589671927282539cc
SHA256

abc3817b1605461fe37a512b22f4cda0ccf9663cee10a0afca27086b394281e3
SHA512

f8bdb48b490b362ea098c6204c407474acf7406b64919e0d2d82cfab6d6a5a6792d73c0488bbbbcd7525f5da70d68cbd8953765eca49f12ed22d86b06fc59c58
SSDEEP

768:1Um0mPHwtSqn/UyPTIEPHysHl/DbjGrkBc6CP:nHwtRjFHysHl/D3GrkB3e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4477167a6a18c09b4155267e2275d830_JaffaCakes118

Files

4477167a6a18c09b4155267e2275d830_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 306KB - Virtual size: 305KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ