b0df44570b2ea947717b202006960b57_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0df44570b2ea947717b202006960b57_JaffaCakes118
Size

13.0MB
MD5

b0df44570b2ea947717b202006960b57
SHA1

d9ca6ca936ec9e1df3c1aafebc1409192d527065
SHA256

d65ec554ed83ca52811fc210fbe68df870f761c20ae668b96d7808a01b82b0ef
SHA512

98846ecd73f0b6285af33f737efe817afd2ba43e13459ddb325e127aa6c8680f461deed7af2720f5900e3638b6905d2433ea3efda43418bd5017d70f4412b42a
SSDEEP

393216:DfZmNBqcn/AsDl2BMYK/YJHvCNhLSdYxJ+Y/2p:zZVWYsDL/YJOrsY/2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0df44570b2ea947717b202006960b57_JaffaCakes118

Files

b0df44570b2ea947717b202006960b57_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ