b1e9cef091706199ef79f622bde2e7ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1e9cef091706199ef79f622bde2e7ed_JaffaCakes118
Size

16KB
MD5

b1e9cef091706199ef79f622bde2e7ed
SHA1

0b6f489eeebb94782884bf3c2d4678e13d153a0b
SHA256

30b609be29a18143612ff26ecb582431ccc1fb9f0e8d3cbcf3faef3be7436470
SHA512

fb218db005ca96215c6bd3ad3f49faddb114d9c012aa13e0fc435069017fd26e3e7af9c828f033576417c38424080fecd5ee25a9d582bf295b1b25311761050d
SSDEEP

192:ndZLy2+riBipoLzYGqfz5P+V8o8PVCpiQySwsMsr766rdZZcrBvi5eQjcWpmn6u1:x+xpAzzq9PhQ/wsMK3fki5eAzU6q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1e9cef091706199ef79f622bde2e7ed_JaffaCakes118

Files

b1e9cef091706199ef79f622bde2e7ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

kaixin
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE