1b0f705b6d72b5e5663c146549f803de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b0f705b6d72b5e5663c146549f803de_JaffaCakes118
Size

431KB
MD5

1b0f705b6d72b5e5663c146549f803de
SHA1

2ed8c336b5e943153a678664fcf57acea6317377
SHA256

49575e65c7413824e06d6f2d7dda918e9c663b1460da2498038a442509ea9dbb
SHA512

5344f50a6de712ad304314b04df4f502932c256d83887c1362aa1dcf4bc4566dfa3c825583c9e18203366a47d6fbbf9b44902dec52093a3f56114d6e72987969
SSDEEP

12288:sExc9crGCFpk96RPc/xXx6qch4nf0wqn:bc9cyuPc/x5cqfb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b0f705b6d72b5e5663c146549f803de_JaffaCakes118

Files

1b0f705b6d72b5e5663c146549f803de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 373KB - Virtual size: 373KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ