744e2c80bf11a98fbcfd3cc941fba8a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

744e2c80bf11a98fbcfd3cc941fba8a0_JaffaCakes118
Size

284KB
MD5

744e2c80bf11a98fbcfd3cc941fba8a0
SHA1

f4a6641c649e5ec8035c5598886aaeeeaf4e427f
SHA256

cb6115a849df86ceeda23b3f8ec25b4e1a8ba0b3899dab06b3e8d7944b67646a
SHA512

f7fcde2a30c9be18c155d02cca4c5cb2be9637a0edd06d784ac230d16bb3b4e955ef426ff48f7150474a509812e8d59152dbab354509ab1715aa376991d53d3b
SSDEEP

3072:bNa+cnC4rIkheILaEwp7i5tsNPXtjTkR/YF/9jnnh3Isbu4hmpqwpAPpHyJ5H36x:splthaEwFj/wu/xnh4cqP93fB4T0P0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/SWIFT.bat

Files

744e2c80bf11a98fbcfd3cc941fba8a0_JaffaCakes118
.ace
out.ace
.ace
SWIFT.bat
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 431KB - Virtual size: 430KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ