007bae8bdde38c13c070d95cdc77071c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

007bae8bdde38c13c070d95cdc77071c_JaffaCakes118
Size

137KB
MD5

007bae8bdde38c13c070d95cdc77071c
SHA1

bd970dd308c5861bf2388405bedd90959faad3cd
SHA256

0075d8bb1c8f63675bb9d09d2dac1e03949ceff744d44c007207197ccad57fbf
SHA512

0c8af4d411fa2c9cec984beb5c1d891c3cf63213bd6a7d5e45ff5039dff6d513a63915c622d147b75d209ad5f7712997c26848c5b2b8efea864106496d391b3a
SSDEEP

1536:OflWIIQn/YOsj7+3RRH9yLOW7S59LKQosFLRMPiZn7QB1XdwA:Otuxj+Rd4Mm9PiZn0B1XdwA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
007bae8bdde38c13c070d95cdc77071c_JaffaCakes118

Files

007bae8bdde38c13c070d95cdc77071c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ