b1963fbca742cb1e8a619fae0ae2a79b_JaffaCakes118 | Triage

Sharing

General

Target

b1963fbca742cb1e8a619fae0ae2a79b_JaffaCakes118
Size

305KB
MD5

b1963fbca742cb1e8a619fae0ae2a79b
SHA1

6b4f6e4b82be0ba53610d244d47d4bf0791afe01
SHA256

409f493207f4337c4b3e0ae33562405a50502c11b987d4db4116e53bb81ce786
SHA512

93532f01ec0f39472e48d23728fd86eb451b500c840c9a74e64f628ef64685e415d3b10489f2aec33961fc5b2fbb6c841c77f8a7bfe057e4cdd30bd69210701a
SSDEEP

6144:5GSz3T72Y0SdzinYKTY1SQshfRPVQe1MZkIYSccr7wbstOtPECYeixlYGice:5GqD7SSUYsY1UMqMZJYSN7wbstOt8fv4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1963fbca742cb1e8a619fae0ae2a79b_JaffaCakes118

Files

b1963fbca742cb1e8a619fae0ae2a79b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE