c1cf1bc85c969c751e4111f85f9e4010_JaffaCakes118 | Triage

Sharing

General

Target

c1cf1bc85c969c751e4111f85f9e4010_JaffaCakes118
Size

228KB
MD5

c1cf1bc85c969c751e4111f85f9e4010
SHA1

ccadf0fb3fda7918d3816d3d132ac6d90829be19
SHA256

10c0930c3972b475d5d4a063eccb6190962f1a75cbbb5ec6c3a74c358a059f40
SHA512

e9ad06f63ea15334f1b0a553401988a4d168b2c23005eef5e8d87f11287d1eeb7b2402878fc9062b76110420511eb18b306ec88c5f7522e6047390e78feb2bef
SSDEEP

3072:QdRqg4acVcI08AJ9hU793d/NPULTUjVE/q9PbJ0kBavndg3Jsn5s/bi3xAcYY7R:GGaJSRUobJ0kobnq/zc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1cf1bc85c969c751e4111f85f9e4010_JaffaCakes118

Files

c1cf1bc85c969c751e4111f85f9e4010_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ