b1704d7308d140b23425b7f4579539e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1704d7308d140b23425b7f4579539e9_JaffaCakes118
Size

376KB
MD5

b1704d7308d140b23425b7f4579539e9
SHA1

eeaa57b513396bd2cda613f2392a73059ee3fc38
SHA256

ceb71cf56c12623fb92099dbb0e0f15e3374300af10e6b036445f608cc65bdcb
SHA512

0a80abc27f5631a794536106ffdd0f2f91dc3278be9569dc2a948ba5e97b2d0f2e9c88bdaabaa2b61e92c9ca129966a9078cb48ba178efe7d9c5171c96d53e44
SSDEEP

6144:2H/mMUOr/uXqgb+f2M1MyVaxeaIK0EVIfEfaY4Cwb1:MjDrVn2M1F8eaIKwEfR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1704d7308d140b23425b7f4579539e9_JaffaCakes118

Files

b1704d7308d140b23425b7f4579539e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 341KB - Virtual size: 341KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 9B - Virtual size: 9B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 458B - Virtual size: 458B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 112B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ