bd6eefa73c77dad9c097b918f6cf8b73_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd6eefa73c77dad9c097b918f6cf8b73_JaffaCakes118
Size

108KB
MD5

bd6eefa73c77dad9c097b918f6cf8b73
SHA1

3d270f47637bd1392fe049745f64d92df3cb39d4
SHA256

07d2258250d7607d865edcd32472ef3d8f90a761f478e2c53f11857890e054b4
SHA512

33faa14746b8f2ccb37eddfeceadb0aead44561494c4dd7062a5e15e0f0d8a5f97afb72f0bf090761d352504171ca5a9381c41b2b368fbda0fd0b338c92f2e0d
SSDEEP

3072:Mf8wNOO5/bHoUYmxF44UkbZEvoAKq6C/:Mn5dn4rkWgw6C/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd6eefa73c77dad9c097b918f6cf8b73_JaffaCakes118

Files

bd6eefa73c77dad9c097b918f6cf8b73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 80KB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ebut
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE