b1e49a884721e72a31f4e4d5b8381fee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1e49a884721e72a31f4e4d5b8381fee_JaffaCakes118
Size

1.7MB
MD5

b1e49a884721e72a31f4e4d5b8381fee
SHA1

9c0ddaf58bc007ea229a0a4498e5262087dd05cb
SHA256

6ad3ec9353196dde737273aef64f22fb5ac74f3ba60175cb75c164dd3c545af9
SHA512

d539fe76d2043f9ed1858a4bffd416e448775d86191b6f5788f0f919374e74959f0e5a9cf27dbb02fc35f4beb56c60ef28d194e4c6176de8af74cb4dd06f6f24
SSDEEP

24576:0F96O0sP4Yoibz44uWmQHTTNRrb+4n+2L5OnhK62FVSSg+fu:0F0O4D9GTb/+65OnhTySA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1e49a884721e72a31f4e4d5b8381fee_JaffaCakes118

Files

b1e49a884721e72a31f4e4d5b8381fee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 996KB - Virtual size: 995KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 593KB - Virtual size: 593KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ