1bf64ee52b28ab5ea738bcce47de3a25_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bf64ee52b28ab5ea738bcce47de3a25_JaffaCakes118
Size

129KB
MD5

1bf64ee52b28ab5ea738bcce47de3a25
SHA1

6ef8c1fab7811eab238d386f79fb12de5ed91637
SHA256

d172ac199a7e908a715dbc3689b11930a53c6c03c30e41d0c3df01f93052c017
SHA512

91e1bfd0a9347c8fdb2244eb88029acb2405dee87994e7caff60618bf495c7e841b586af3684a762157fed90ddc096faf674aab07f5fe05f7ebb0c4b9755cb47
SSDEEP

3072:C4RDhRDhRDLYjZqyZguz1XUOdty7W2ehtNrO2kuy8qhSxufi/e:C6DnDnDc1qyquzZMq2oCTj8SSUEe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bf64ee52b28ab5ea738bcce47de3a25_JaffaCakes118

Files

1bf64ee52b28ab5ea738bcce47de3a25_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.4jq9jq
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ul$p3u
Size: - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: - Virtual size: 3.0MB

.rtss
Size: - Virtual size: 444KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.debug
Size: 117KB - Virtual size: 120KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE