1bfacd963a5049e21260dec50b7a1b89_JaffaCakes118 | Triage

Sharing

General

Target

1bfacd963a5049e21260dec50b7a1b89_JaffaCakes118
Size

38KB
MD5

1bfacd963a5049e21260dec50b7a1b89
SHA1

dc9c0410fb483f956adbef34cee2623c9e0e0977
SHA256

02b69313a8849fc79819bf888a07e9bf26386c2d1ac0a52c1a5c9f0dcba15542
SHA512

becfc7d3ed4d9eb66522a8ef05f9f49ad0e97dcfae6e7a6a78269a2de6f7842f42a96169bd7a5ca5d04cec90dac57304b050e00a175ba50bb990bfbd9f5fd0ba
SSDEEP

768:l4tNkbv5HEm3vCU+TZg0iedB41CA57YBmuxQDwv:l4tNmv5kmaLTGnezVComuxQDg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bfacd963a5049e21260dec50b7a1b89_JaffaCakes118

Files

1bfacd963a5049e21260dec50b7a1b89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 865B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ