1b2baddcd8753e32da1b4aa56e15daa7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b2baddcd8753e32da1b4aa56e15daa7_JaffaCakes118
Size

423KB
MD5

1b2baddcd8753e32da1b4aa56e15daa7
SHA1

17153e6d2ebc1530ad67e4858c26bbfaaa7a5ed3
SHA256

0095b7f11c2373eb9cb36ca98f34da18bf043df28323beb8d55c6aeee94ac093
SHA512

95bf37e3f5473da479a260c1272a5608a0e8ad99d26b7ba5ea2b728f702c974cd33f279589f2a98293a4cf7069b296b26a35003890846284b119ad33df313101
SSDEEP

6144:j3c4fwyb+SFcpGoR+WglwhM7iXD5Rs/8bA0CGqVO8iH09cvc2CihunwHh3yj0OGp:5b+ScYx+hMGFRtUGdgYcShip

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b2baddcd8753e32da1b4aa56e15daa7_JaffaCakes118

Files

1b2baddcd8753e32da1b4aa56e15daa7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ