b4ed9b4447d8fd7b0725d40f70b7d526_JaffaCakes118 | Triage

Sharing

General

Target

b4ed9b4447d8fd7b0725d40f70b7d526_JaffaCakes118
Size

162KB
MD5

b4ed9b4447d8fd7b0725d40f70b7d526
SHA1

bc6544d42b7a48ff3eef8a2005126f66eec2b1e4
SHA256

01bcb10fc1261704a05cfec144cdb31bf2712ae566b9a9fbb81408b28d4b9016
SHA512

eb7b7b8a7fc5b63930429d7ac6f9cb54e3e290ce6b7f1d9123cb0125a9ff97df30374227e03293253063ca5242ed209645bdd0a4368eaf48b6d889fa978efed6
SSDEEP

3072:t2IhRei3JQFalgplXKgwKctOI6MN/VrDq8kvDp/Ag3V0CKJI:3e4cx6tOI6MZI8eDZoI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4ed9b4447d8fd7b0725d40f70b7d526_JaffaCakes118

Files

b4ed9b4447d8fd7b0725d40f70b7d526_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 942B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ