4489c158e21ef8656da67dde956763b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4489c158e21ef8656da67dde956763b0_JaffaCakes118
Size

252KB
MD5

4489c158e21ef8656da67dde956763b0
SHA1

ddf78ab2f086dec9a6bb306daa0ca6dff8b4a244
SHA256

a01c5abec0d80ecbff7c66edcfb49635b988fcc0315b2f1469c4b41cfaa9fd86
SHA512

de03d07e832471b5b2feba399137e8562ae76d0670909c858bf39c6ff6ea3987866501da42d8553994355ddda89896b8f787b30ebfd755e0ae6f410da383c82f
SSDEEP

6144:GOrMkzjyNEDp3a+24nDWgRAkPcgtGQn8xID0DMFMugjbYRgRVz:GO9jyapJR3Pc+GLxe0DHug/R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4489c158e21ef8656da67dde956763b0_JaffaCakes118

Files

4489c158e21ef8656da67dde956763b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 230KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 147B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ