b0456b9fdaa285f8d9fa69d7536de326_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0456b9fdaa285f8d9fa69d7536de326_JaffaCakes118
Size

57KB
MD5

b0456b9fdaa285f8d9fa69d7536de326
SHA1

3ce8509bfccc1e158128d94fc1c87329456f4b8b
SHA256

ae84c8ab8829ef9046768ada3ce2702fae326d15c7e58f4cf1502469bc1384c1
SHA512

7fae813b83204bcd951f6f87437224489b7217a31d287c2597df07db329ad612f940fa2cde5c2dc9f84b82714ba7544c84a6e9c53cda348b6a52bcfb9efcd22e
SSDEEP

768:V4wXIl0hobkbQn2UOqyzG5NsBJswpf5zjSSyDcwI1m9xq3HTD15zTlwYysiCpppo:qQIlgQnViGjs3RNKc/me3HjTlSsvpJX0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0456b9fdaa285f8d9fa69d7536de326_JaffaCakes118

Files

b0456b9fdaa285f8d9fa69d7536de326_JaffaCakes118
.exe windows:261 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

DATA
Size: 16KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 8KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 101.8MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA

M
Size: 25KB - Virtual size: 1879.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ