b1f138e46caf1db42a45ba39c3499033_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1f138e46caf1db42a45ba39c3499033_JaffaCakes118
Size

160KB
MD5

b1f138e46caf1db42a45ba39c3499033
SHA1

6e4120b058d10fc25eb52c37e08a5e9a3dc6308e
SHA256

befdabe5750f8b4f82af3c0d12a391f76bcb8d40325166a9cb2155fd846a6731
SHA512

2bbe23e8cbcd0f74c4a96b756af92990e533fafbfc5f36f6b125f804807d715c0ec59b797153d0c0b63dd8054f6cd2ca2393d9afdbfe72bbd5a8929950134ded
SSDEEP

3072:ZmBZCIfQaNhuU7POcDG/WxPiEdLVrIzbqDuzLGFLOmbiYG0ITYlPB0hgPh:ZwZCvafRLOylrInvQL1mYIyZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1f138e46caf1db42a45ba39c3499033_JaffaCakes118

Files

b1f138e46caf1db42a45ba39c3499033_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 170KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 60B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ