1b1e9a74d070cf38c90fb3fb690dcf1b_JaffaCakes118 | Triage

Sharing

General

Target

1b1e9a74d070cf38c90fb3fb690dcf1b_JaffaCakes118
Size

52KB
MD5

1b1e9a74d070cf38c90fb3fb690dcf1b
SHA1

efff84e2c9952afb93e94098eb94a6c582b4f491
SHA256

0a721c4c4dd6bf03e60a0c514c71bb50bf9ca5657f88ec4f0338ce446f060bad
SHA512

7a17fbd485d5ad86a448f2150eb796f5c1ad844632aa9ae9d0bb0d21257fe19ebb7a135baddc7929ac0c1f29a52ec62ef2a1bb73e8b589cd96e06c725d37ccac
SSDEEP

48:0PYUqc3MILm/6zepNMPjPuUG0cGnoPBUGDHRw6OMpL3Eup2fedkfICoG:0PALnuCkIU63L/pKedkfK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b1e9a74d070cf38c90fb3fb690dcf1b_JaffaCakes118

Files

1b1e9a74d070cf38c90fb3fb690dcf1b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 259B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ