857382b7bf89853b04a8d9de1149226a_JaffaCakes118 | Triage

Sharing

General

Target

857382b7bf89853b04a8d9de1149226a_JaffaCakes118
Size

765KB
MD5

857382b7bf89853b04a8d9de1149226a
SHA1

dae350921afdb9ab564de42660151a8f7b741ee2
SHA256

9f1c38624dc6883c7b4d8c327d703e0601e8dbebd5063e44bd4e42b3e7259d50
SHA512

58dc4440ea361f155191d0b9c2be0a51f56fb07e6328c60c11108796280baa9657e33dc571f5671e6a8479a9771a642f21a76fba56728abb13f588c35b166811
SSDEEP

12288:ORFjOebWQb5hi29T68JGa8ONTdrJKiPCAawzkuJt5zxgRx/eglMpZ2GBTeckadvc:debWQb5gjcn7VjXaM5ix/Hm4aTeckadU

Score

7^/10

Malware Config

Signatures

Molebox Virtualization software 1 IoCs

Detects file using Molebox Virtualization software.

resource	yara_rule
sample	molebox

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
857382b7bf89853b04a8d9de1149226a_JaffaCakes118

Files

857382b7bf89853b04a8d9de1149226a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 772KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rol
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE