bd3a544ed3119f7ee654f62dc5c4ae44_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd3a544ed3119f7ee654f62dc5c4ae44_JaffaCakes118
Size

429KB
MD5

bd3a544ed3119f7ee654f62dc5c4ae44
SHA1

1ff5ffe4a895bf906a9c69769400336f83dc759e
SHA256

336d85d7365edf0e03e1a66acba5a70698a78c4a61f8946c5ec3658b5d6270de
SHA512

9fd2dacee55c1919699e06c6c49b88d6ac4857a2364485238820efee5c2afed6c87e99b1a18cfee19af512b3ea40a6b55c75830e45683208bba8b99b913a2569
SSDEEP

12288:8S7PCl7d2YM6WmMrFyq1OIUFbJovXlTrWcAy:nz47dSmMsqGFleBR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd3a544ed3119f7ee654f62dc5c4ae44_JaffaCakes118

Files

bd3a544ed3119f7ee654f62dc5c4ae44_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 359KB - Virtual size: 359KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ