b1dc0e1db9ca154d9ad94a0f525dc092_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1dc0e1db9ca154d9ad94a0f525dc092_JaffaCakes118
Size

307KB
MD5

b1dc0e1db9ca154d9ad94a0f525dc092
SHA1

373617f6747045e65490d6e44013de3d98320b8a
SHA256

5e50ec2851adaba834599926acddde721c73f0bb1b1830538b6b9292f44017cd
SHA512

9ab280d8a078f9a3e909fb3fada8f08dc10a0cd56c20f8e577af3ba9164988a43406a7d42ad84f1982d5e3b83ad45379639bee31ab03fbcd8a02fafd2218bb8a
SSDEEP

6144:K0vziT72Y0S9zinYKTY1SQshfRPVQe1MZkIYSccr7wbstO9PECYeixlYGicv:K0bm7SS0YsY1UMqMZJYSN7wbstO98fvN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1dc0e1db9ca154d9ad94a0f525dc092_JaffaCakes118

Files

b1dc0e1db9ca154d9ad94a0f525dc092_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE