1601fdc4e7fbdcc0741b4c49a8a019e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1601fdc4e7fbdcc0741b4c49a8a019e9_JaffaCakes118
Size

2.0MB
MD5

1601fdc4e7fbdcc0741b4c49a8a019e9
SHA1

89e7acd60c5d44ed1e3a65c4fd1e5edca3597830
SHA256

85e0ca1f3463840df4e1e02751fd79ff806d8590a63d35ca99a4813759e95544
SHA512

c7b660a5976959ef3bac3924bfc60726d0a437bfbb16b305d7b0cbf2161f663a54331e41eba078cee78805f4a1a04c2b9e76f6846696f9072406cb1dea3c32d8
SSDEEP

49152:WpiIsv1aKHHzUIs3XPcg64p8iq4iyzx7tNt:Wp3C1aK4HFbiyzp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1601fdc4e7fbdcc0741b4c49a8a019e9_JaffaCakes118

Files

1601fdc4e7fbdcc0741b4c49a8a019e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 623KB - Virtual size: 622KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ