b77bbcb8bd5cac1186137c34e37590e2_JaffaCakes118 | Triage

Sharing

General

Target

b77bbcb8bd5cac1186137c34e37590e2_JaffaCakes118
Size

43KB
MD5

b77bbcb8bd5cac1186137c34e37590e2
SHA1

2bdb6daa6020675a0dc0dd3d239a6c7bbe1d4b31
SHA256

29355d05456be7a7167326e321fde39c4acb96b6f8b407b5022ff54757c5b705
SHA512

b0c8095ac78bc6a7594e7383bad63b5d6be32ae8db6da6677fc568a6b7b39e82e529db54fd65b5a09403c3a176b42a05429fb8faadf6b8046fd126246cd54347
SSDEEP

768:WVzjwvegH+vENyJW2sgN1BXQsFiQEj/5BauxCGrtj40:WVPwvDWgL2N/BgsFREbjauxCGrF40

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b77bbcb8bd5cac1186137c34e37590e2_JaffaCakes118

Files

b77bbcb8bd5cac1186137c34e37590e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1021B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ