1b06bd6c0c58583660d7f8b0aec70583_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b06bd6c0c58583660d7f8b0aec70583_JaffaCakes118
Size

3.9MB
MD5

1b06bd6c0c58583660d7f8b0aec70583
SHA1

7d86ad91ca3166370d50cb3e017cd30da92a54cb
SHA256

469d466c0c0ac5041600e5bc3a7b583ef7fd141acd209cee81a6c4fdaf7b3e96
SHA512

ffef6469762df0632b05ec95d9692f5ce4a9a71eab31e42d54b4999a3ee12936d0ca02d6d40dcdd1a1e7ea9f8fd2b7252b1a5750c0fdcfc550db9d232acedac5
SSDEEP

98304:VYwB90mzpEEnZ7M75oUWtgEu5HSxlgoYBLO7:VmmzeEnZ7Q5oNNo7BL2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b06bd6c0c58583660d7f8b0aec70583_JaffaCakes118

Files

1b06bd6c0c58583660d7f8b0aec70583_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 974KB - Virtual size: 973KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 36B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 587KB - Virtual size: 586KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ