1bd6f2ecf1190edfb6282aa9d27be2a6_JaffaCakes118 | Triage

Sharing

General

Target

1bd6f2ecf1190edfb6282aa9d27be2a6_JaffaCakes118
Size

305KB
MD5

1bd6f2ecf1190edfb6282aa9d27be2a6
SHA1

67cdb36fc56ffa7391134da4f66c5c7cd30b3bb4
SHA256

62a770c50921bb6b3b08e944c418254e04439a236a333ad8318105fd571e5dfe
SHA512

473160a47c75f72c103eeeb71de184ade8e135f53509221a6326b3e91ee68f24ba244cd26f5ea5e7bfbec26daf95a958a92260f321ec69db8266947d86f20925
SSDEEP

6144:D724ToFyJEy8tTNzkrzmqUCQVxwhTtmOLrGQ+gd4DHJr6sBeDwb2EcxWLJvY:32F0ElHzDxw5tm0Igd4wsBDjxY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
1bd6f2ecf1190edfb6282aa9d27be2a6_JaffaCakes118

Files

1bd6f2ecf1190edfb6282aa9d27be2a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ