4a6864adbea3126c81b50212c1794138_JaffaCakes118 | Triage

Sharing

General

Target

4a6864adbea3126c81b50212c1794138_JaffaCakes118
Size

81KB
MD5

4a6864adbea3126c81b50212c1794138
SHA1

84adf247a1889bcd105437b9d2974f99851268c9
SHA256

cfc22613872df48a143b51da2dfac57808225c1b18ad4172a3b5d02683ffec90
SHA512

4bc99fc32fba32ecfad7d7277e21b930f5678ed6bde7891a10d1f2fa0f9273584b78a2102ecda73e0d36a47391297382664c58e8c75a2f31fb8d5d37da976f95
SSDEEP

1536:sN/efOdKwYWakcl2KDXVPvhUOWbfAE8U:4/DKwYWEHhx4p8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a6864adbea3126c81b50212c1794138_JaffaCakes118

Files

4a6864adbea3126c81b50212c1794138_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 516B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

code
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ