bd61ee13c162265b1fb18fb783d98c85_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd61ee13c162265b1fb18fb783d98c85_JaffaCakes118
Size

89KB
MD5

bd61ee13c162265b1fb18fb783d98c85
SHA1

449ee9ff091d175b61b66b45ae7cd5db62e7dd64
SHA256

547a7ec592d228a831a84dc4d002bce55f6d1bc9d1847133a5560f4919d40966
SHA512

a88f4850e86b15294b8a1ef73b57b02551e6b8a78aa6ad5918ae96d68be92ad1063d3bf48b1e45a8884c8c43003ece5794a97297c233e092a9446f5df0825178
SSDEEP

768:FPY+OBNYIQShTBy1GuqFFSDpcdlKETkZRR//N0cnZj0O6Guz+4NMmOCITdogw:FL6Zs1fqrSDpol1cN0+Zj0/zdW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd61ee13c162265b1fb18fb783d98c85_JaffaCakes118

Files

bd61ee13c162265b1fb18fb783d98c85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 12KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 67KB

IMAGE_SCN_MEM_READ