4414484bef9cba6d41a40fe00a20b3b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4414484bef9cba6d41a40fe00a20b3b3_JaffaCakes118
Size

196KB
MD5

4414484bef9cba6d41a40fe00a20b3b3
SHA1

daf9d23ea4eb2b50f7d64ce92950049399bddc1b
SHA256

b36308eda21da77d0eb536b53e8ecb385efa5462f1a9c8bbef399738659f64af
SHA512

e1fe02efea515181fd9520ba1a241ca4728c52f2aa6803d23deb354ec08bd6cde0a20486be60e983fef8a4fec767d720339bdc92e05cd07be89f9c8a38deccbf
SSDEEP

3072:rflhmqIbQlHmcxCRsvOsBdS1Cwr3TFQTv07VGkIbkWb6RTtY7Arx+7IoFo64L5m4:r9hxIsxBxCkSo4Mhb69t87IoG6M5d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4414484bef9cba6d41a40fe00a20b3b3_JaffaCakes118

Files

4414484bef9cba6d41a40fe00a20b3b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ