1b081b85b5f53e313457cada507d4673_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b081b85b5f53e313457cada507d4673_JaffaCakes118
Size

948KB
MD5

1b081b85b5f53e313457cada507d4673
SHA1

abd67fbb87bf87ae7ab73d5145f8a1da736b17df
SHA256

a4d98fba082427870aa4e70df50e7f0396f787d6888dea63e0928faaac630eec
SHA512

ea9bf0a8d60214c222ee89f312baed34ef2cf1b55eefac7413d4beedc5639152a6f5ae9df15f1d550c4f0ee5c100e823afca11006f1ee862eefd409f7cefeb49
SSDEEP

12288:8uPUTLYcAaUMhUhLupXshh1PEd5hOoRNm3ysokUbkoPMJakkkOwtfHfhk:8uPmLDUMihIXCE53XsNrbJAw9HZk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b081b85b5f53e313457cada507d4673_JaffaCakes118

Files

1b081b85b5f53e313457cada507d4673_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 429KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 18.1MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ