b4f4282136e1e6954834e04903e8c0ea_JaffaCakes118 | Triage

Sharing

General

Target

b4f4282136e1e6954834e04903e8c0ea_JaffaCakes118
Size

4.5MB
MD5

b4f4282136e1e6954834e04903e8c0ea
SHA1

7bcf7e0e2a785a380e7571f1642596adcd2d9d0a
SHA256

b043254fee3d930061fd11d821436c8bd7debf1204910a116fdece4423ee2233
SHA512

d0482cdf5381de2af75fcb555f6ce62361fa201ec304037a71478a1d56e236c7f21b43cd17f208bf1a753007983a802afc5fdbf6e016894117df1a26690f4c3b
SSDEEP

98304:Oo7Ct7fOB8mIAHD49GyyBeJEhDXM3bck6fvaCs3Foq9ftT/qlUTuMYlzj4/fB/4E:Oo7Ct7fOBXIAHD6GyyBeJEhDXM3bck6o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4f4282136e1e6954834e04903e8c0ea_JaffaCakes118

Files

b4f4282136e1e6954834e04903e8c0ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gda
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE