1c43ae51c82d4e593c3b084ddf6b1caf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c43ae51c82d4e593c3b084ddf6b1caf_JaffaCakes118
Size

366KB
MD5

1c43ae51c82d4e593c3b084ddf6b1caf
SHA1

cfb731085e2165ef59079b147fd5c838fd8d8330
SHA256

dec0f526585cb32f72413efba2799aa00b8bee9ee1630e76d75f6beb9a1f43c9
SHA512

92d38a3c116362545959e10805a65b3823484b62010697f1f6dfd3c996eb8429334986f1af03eeff508a7993b6165e9b3e6805cb7f66b4ada586c84e8036eeef
SSDEEP

6144:y/u5QGk07nPxqlT3jPUM+kX4RIb0rbunjzreW7KSAiWMIulB/U2/jl:iu5QGk07nPYs/kXNr77KSXW4lB/U2/x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c43ae51c82d4e593c3b084ddf6b1caf_JaffaCakes118

Files

1c43ae51c82d4e593c3b084ddf6b1caf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 309KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ