b928b3cba957f1f6c9d0c2452b4477ab_JaffaCakes118 | Triage

Sharing

General

Target

b928b3cba957f1f6c9d0c2452b4477ab_JaffaCakes118
Size

90KB
MD5

b928b3cba957f1f6c9d0c2452b4477ab
SHA1

009713850674e04be938fd62de2778f4a23b7b2c
SHA256

9bed03b0027bbf4e0cbe08cff407cb75273168ff1a82071dc254b92aff8a7c79
SHA512

baf12723eb728b21f0911c0f072db860b8745fea52e087ed5061bb49fcb85eb4670c88d7c6716c87f699e7c595c589287334ad0db38d5968366989f30a6300ff
SSDEEP

1536:xjqjoQaSi1Pdbw4kWF3qH+3huoEPRzYxM/ZQILvFlLXTY+1zYJKQWegM9:UoDSuJJFae37EPRzYxsZQILvFlTTdzYD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b928b3cba957f1f6c9d0c2452b4477ab_JaffaCakes118

Files

b928b3cba957f1f6c9d0c2452b4477ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ