b2f16e0874ea11f207e5a95be7de7d93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2f16e0874ea11f207e5a95be7de7d93_JaffaCakes118
Size

392KB
MD5

b2f16e0874ea11f207e5a95be7de7d93
SHA1

4657f1772fdc30e50df440cc648fdb1c8aa83074
SHA256

236c85a7724217a63f4601d739d5a5c981d9447adb836ee8664e543c134d3b10
SHA512

2eeabc2dc0eafcb78587c6eb5c3eccc40a06781f4b5bb9659d1295ee5b73f9dafde6009d98a1fa00bbd9d333d293c88dc243e4d0fb9700a84f2f43f1aeca66e3
SSDEEP

12288:ghn1b1UTygF5Eic3fW4aoZPkroCk6z5kap:K1EF9u8oPw17zFp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2f16e0874ea11f207e5a95be7de7d93_JaffaCakes118

Files

b2f16e0874ea11f207e5a95be7de7d93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ