4578a7ce867f7b73b4a36f079df72ea5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4578a7ce867f7b73b4a36f079df72ea5_JaffaCakes118
Size

1.1MB
MD5

4578a7ce867f7b73b4a36f079df72ea5
SHA1

37f86566b0f8106bc3bcb1ff57b64b3bc720ecbc
SHA256

fc2af4f722cd7c357873a7df631bd6e974a64d92f43896215c3a580764e7c31e
SHA512

68c2aa45984bfb502192d3c1676425f76dfd8b6704d4d352883fc0c9a5cfe2e17171accf018a5adbcf5cbfecd4d3a5489dad1f59f886fbe79728c119dbd375a0
SSDEEP

24576:6pDVZUlMvJYFLCZylB7fRS6IJbNVtPmVLlPvajQrHijN+CT:6pDvUXgZ4hJS6IJbNVtPmVhP/CX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4578a7ce867f7b73b4a36f079df72ea5_JaffaCakes118

Files

4578a7ce867f7b73b4a36f079df72ea5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 828KB - Virtual size: 828KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ