b1ec98c4f0d4088fee072b04592bbfb7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1ec98c4f0d4088fee072b04592bbfb7_JaffaCakes118
Size

10KB
MD5

b1ec98c4f0d4088fee072b04592bbfb7
SHA1

3bff62c4b3e3bc9630c32611d5eb7c9172457206
SHA256

d8c9bee31a6552a4d578da2ff2962bb0b22e9a75504971d83b83142cba4889b3
SHA512

5c6e4644f3a3e4ebbc7259acd55d56a7c7acace021e60af3eedb9711abdf356b20d5afd86605daf5dc86c056db6d2244b3f1870efcd03c898f34069a110f2a8b
SSDEEP

192:Ovme4lomWLEgjqfYUsTOFuZpDaXSXaoJqvpKRzSPgU:OO1lomQEg+fxsSwdaoJqvp0o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1ec98c4f0d4088fee072b04592bbfb7_JaffaCakes118

Files

b1ec98c4f0d4088fee072b04592bbfb7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 306KB - Virtual size: 305KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ