1bfeeffbe11789cda615542cb0aa863e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bfeeffbe11789cda615542cb0aa863e_JaffaCakes118
Size

591KB
MD5

1bfeeffbe11789cda615542cb0aa863e
SHA1

2c864705bf7fc596ed0d3840c97fda515f796fb2
SHA256

ca0369c88be2ffef24cf58c81b40f74fe97f2d9d33aba09316dd9202ebc49f03
SHA512

291b554274988942434643bf697599b715dad7b243a49d65eaf77bc82fb79c9015b4f1f7cff2394740152832e4cc223b562b6ba781104f706b414090fef89fbd
SSDEEP

12288:gEQdEHS0XATZpAfcNW3ly29b/En7UgM/wjyWGVQXUf4x8c:agwTZpEJbps7UgMoxjEPc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bfeeffbe11789cda615542cb0aa863e_JaffaCakes118

Files

1bfeeffbe11789cda615542cb0aa863e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 440KB - Virtual size: 439KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ