b1a454d88c471e671633593494115bc6_JaffaCakes118 | Triage

Sharing

General

Target

b1a454d88c471e671633593494115bc6_JaffaCakes118
Size

1.0MB
MD5

b1a454d88c471e671633593494115bc6
SHA1

b37a6d048d5a0d7671f412cc51f6bc9d84fe9c48
SHA256

df213fd05f1091f320a67486d14c19743c46ece7678e6b3a4ea79641bf22d7ea
SHA512

2076b2e44ded7eebab7835b092081919148843320eb4ca77c86d9c057e48e3682192180ed017244d6fbdb547bc0522b18198d41afb2b60ff9abf5986f0ee4bb8
SSDEEP

24576:3j3e0AelKADTLEDegLXbqY3J76Qgh2ADsTuAxsFpxNx8:3j9A7APy9LXbJ3J7/gheT5+FXNx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1a454d88c471e671633593494115bc6_JaffaCakes118

Files

b1a454d88c471e671633593494115bc6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 786KB - Virtual size: 786KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ