b883c1fa1e08fa5964fa9fdff31651ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b883c1fa1e08fa5964fa9fdff31651ba_JaffaCakes118
Size

1.7MB
MD5

b883c1fa1e08fa5964fa9fdff31651ba
SHA1

2e8bf7fbb9b3527e7c01377621eca76fe1b94b6d
SHA256

725b52aff4fe154e7c1c7993dc31666632c01888ceb7fc5072ef68cbc2544d50
SHA512

85152166349f0c8a5e62d95f0190e1b9fd28b09ce9de2b0cf1a786da46388a5234baa996fc83efdec557469a2820a59d50fdae4285309f87cf5582b8fa425b3a
SSDEEP

24576:ZEcszy3ex+BgcdkUjKval17iVlRAm2BADPvrLcU5Ryv6LhWARu/hur/tMiCBeKKk:Zv430ATcULegTr69oFTCvinX1u/mwo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b883c1fa1e08fa5964fa9fdff31651ba_JaffaCakes118

Files

b883c1fa1e08fa5964fa9fdff31651ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 106KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

services
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE