45886d365fd737af1641eae0513d677b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45886d365fd737af1641eae0513d677b_JaffaCakes118
Size

1.0MB
MD5

45886d365fd737af1641eae0513d677b
SHA1

5e9a153a4d8550b0543bcb70679496bec91554bb
SHA256

c7906901a9d51d7e0e616b0e7817d47a9d7e070c63e47ae122807b1b098a8849
SHA512

eb2960ac3d18fb2276d102aaa83e24ddec6a1fef53e8dc71392bd1a63d6d94d75d81157349dfc3f5353649c28e551ece4309755315690a8b5b19e7f49a9c9854
SSDEEP

24576:4lDvFdITCTZgaCxe5QwoW9x7BklslWbG7DdT0hccHU2:4lDZgaC8f/klW/1T6n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45886d365fd737af1641eae0513d677b_JaffaCakes118

Files

45886d365fd737af1641eae0513d677b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 787KB - Virtual size: 786KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ