1bc4b746bb6940f8406275c700e949cc_JaffaCakes118 | Triage

Sharing

General

Target

1bc4b746bb6940f8406275c700e949cc_JaffaCakes118
Size

533KB
MD5

1bc4b746bb6940f8406275c700e949cc
SHA1

474179e342799eb397aab2bb66ae560d16fde17c
SHA256

651728eee2c3c7a12e3bb4e76f11cbef0e163edede846f15e058cdf8a35f47aa
SHA512

3fc644a681b4abe92eaee82691bfad2226c69c37c0717f27a5faafd183d184b376fc7ade71e5d40e9238a06718d5e9369b7765e2b592a6c902200e458f7d92be
SSDEEP

12288:oMpJdR3PX2GLxe0DSttCKJNURk1QHO9aWdyV8AmqI+RDGkin+:JR3PXxx7DStthJOkeiZyV8APRDGB+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bc4b746bb6940f8406275c700e949cc_JaffaCakes118

Files

1bc4b746bb6940f8406275c700e949cc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 329KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 523KB - Virtual size: 524KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 362B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ