1bd50ae2c399fce660375783d29ec6b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bd50ae2c399fce660375783d29ec6b4_JaffaCakes118
Size

773KB
MD5

1bd50ae2c399fce660375783d29ec6b4
SHA1

4296e9335f1b3475279c7c275d2117ae6bcba8d2
SHA256

d1eda23b72c03d664fc3f48f5c42b0d548ac76f930f2ee80d660c8cf14d2405f
SHA512

3a7b608e7e7c42ba4f539eeab789f107f4544664e66c196c03b973bcdba22a5975398dbf095990421f2b0dc01f048d616e8553254438453d191dc391fd8c25b1
SSDEEP

12288:lmY9W91uHlt4fs5X++gYP/98Nrf6ADztn6Jf9Vkas1Sm:lmY898HviyXRKxf6UhSVVkas1Sm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bd50ae2c399fce660375783d29ec6b4_JaffaCakes118

Files

1bd50ae2c399fce660375783d29ec6b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.h49ezp
Size: 1KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pak4tg
Size: - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rtss
Size: - Virtual size: 3.0MB

.loader
Size: - Virtual size: 452KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.debug
Size: 435KB - Virtual size: 436KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE