8b4e53b72610411dbebd27e33f7499cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b4e53b72610411dbebd27e33f7499cb_JaffaCakes118
Size

469KB
MD5

8b4e53b72610411dbebd27e33f7499cb
SHA1

fb33075d5523d2d157f0b1425f69f24b69185862
SHA256

7b023fc4ac93570b1e097a05fffd7517ed9b62a65de5b9c62ea1af1038d0fbab
SHA512

3bd9eefb9b7cd42ab30a84bf48d6a09f7b0398d5a07e482a2b5a054aa32b76dd45f648a2ae390108bcfeddf9466eedd946283d7686e933c26376f4907b082064
SSDEEP

6144:abVpGxhGIHLjsfksJ6fg4DXC2cKmVS+KEKy5AzBYwtwmKRNJxx+z7aM6f+SP9vTY:sVp8efksq/kz10LtMYz0ma9za77gAv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Caribglass RFQ 002192.bat

Files

8b4e53b72610411dbebd27e33f7499cb_JaffaCakes118
.zip
Caribglass RFQ 002192.bat
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 413KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ