1fdc7786650f93238b02c663f70988f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fdc7786650f93238b02c663f70988f0_JaffaCakes118
Size

2.0MB
MD5

1fdc7786650f93238b02c663f70988f0
SHA1

1711a1ab35dd1897a181f04817f32fc053480d9a
SHA256

6089d48d965eab84eba316b6f2ab0625d60ff123c82225a5791be47bacaaf3b5
SHA512

45d1bca33be01edaeb1975bd6df246d4b2791491a2b8fb146d340f8ef203b44df2ba482d72b3419bf871c70f287637d5641c384b67d8725e274f81bb62939974
SSDEEP

49152:76d9wSwwFQlT/oozcnx+D+FC+2aBEn0OzhL7x5aSmQr0+Vbv4e:edCt1/oo4xyeD2CWBPQS/r0+Vb1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fdc7786650f93238b02c663f70988f0_JaffaCakes118

Files

1fdc7786650f93238b02c663f70988f0_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ