44d5f5e0e5e3947a246fd88b9ba8b935_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44d5f5e0e5e3947a246fd88b9ba8b935_JaffaCakes118
Size

385KB
MD5

44d5f5e0e5e3947a246fd88b9ba8b935
SHA1

72a18a3594646bce8c245c4daa0f667aa9c7d8ce
SHA256

3347f631bc2ea39ed518f5f283c0a824ed5ad6f05d2fe763686a27a2f44f8eb7
SHA512

25c716964c902c453f477b965d682f2a6ebee9a3084598356eb0748279f4f784746ee1ca326f34ee44f4db6f6f4c5f2b8854db043f91a7d44bcfdfef03f338f1
SSDEEP

12288:Kw1zw8AgqiT6fLaLydR1klifVyZfGgDt4BD+VqiB:D88LT6fyO1vMZfl7HB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44d5f5e0e5e3947a246fd88b9ba8b935_JaffaCakes118

Files

44d5f5e0e5e3947a246fd88b9ba8b935_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ