b1ce96e6620e7c77cfcc59490d808716_JaffaCakes118 | Triage

Sharing

General

Target

b1ce96e6620e7c77cfcc59490d808716_JaffaCakes118
Size

228KB
MD5

b1ce96e6620e7c77cfcc59490d808716
SHA1

d8c69e02b3bf80aff4b5e53d36c5753854b0f18d
SHA256

594025e5a9ce566d153aa54729aa76667455b6a264998e321260a0fd430f241d
SHA512

7be73f7cc66a0d07ec2c5ec64daa1f2da9484290e946e99d5fb96e34fdf8157b7e8edb5d71fb520b60c2f80bbad68dc72810f8684fad0f03b3a1d3cb47d7c91e
SSDEEP

6144:cs8fvxVg+GCMxuGlQhTvFMxg5m6UNvfDjnziJ:qvG1xuAQmDb7e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1ce96e6620e7c77cfcc59490d808716_JaffaCakes118

Files

b1ce96e6620e7c77cfcc59490d808716_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 183KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 942B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ