461c8e84fe29221a5bdeec0d19f34e8b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

461c8e84fe29221a5bdeec0d19f34e8b_JaffaCakes118
Size

132KB
MD5

461c8e84fe29221a5bdeec0d19f34e8b
SHA1

48c402f7b4b2e06f9ffb4cf29bafc390ee5c9251
SHA256

b9eafcc4b349fd6f4517397119628468b5c609558a5008f65d99a6814182b0bd
SHA512

04626883da9de5f9908de797fac9ca9ef07e12e2dd5b55cd217d2554b1bff59ad7ccc3006f4c8d843b1ff36852e9cdcc292424b0419000ef0991b2ae0f2c8a90
SSDEEP

1536:KWWJltozCJthe7BD/YMh3jNG2mqgBnoAQx8geodYkm:KamhKddgBnoHxLdYj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
461c8e84fe29221a5bdeec0d19f34e8b_JaffaCakes118

Files

461c8e84fe29221a5bdeec0d19f34e8b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 474B - Virtual size: 474B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BSS
Size: 400B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 800B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 620B - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE