bf5acab32091b512fce5541dbb7c4a9d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf5acab32091b512fce5541dbb7c4a9d_JaffaCakes118
Size

8.9MB
MD5

bf5acab32091b512fce5541dbb7c4a9d
SHA1

54e4d01c39c8f17d534beacc23bf7f3f3ef16ab0
SHA256

2d2b9643afe56a1e563262ff4bfe4b4122d151a87c070573f114c4b8435f7f11
SHA512

065b3ff3db2d50c8514694075436544a21303219522fa35a544dc5d8ee7c1ebacf9ee4fa3a3cfc82a4c8b28368c5297a87c475a0e4dcf007bbe4269c97b704bf
SSDEEP

196608:88azg7DSm8azg7DSmL8azg7DSm8azg7DSmO:yg7uwg7ucg7uwg7uh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf5acab32091b512fce5541dbb7c4a9d_JaffaCakes118

Files

bf5acab32091b512fce5541dbb7c4a9d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ