bd73e39c426736b3a1f6f8684f10cf54_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd73e39c426736b3a1f6f8684f10cf54_JaffaCakes118
Size

3.4MB
MD5

bd73e39c426736b3a1f6f8684f10cf54
SHA1

d196a8f24b90ab3620ebf07ed901df532c8a0865
SHA256

64560aca59a1490fca52b2ecff346c3f9d3af27e6224e749a67e6654951e004a
SHA512

4b387f0aa8ce7afb49ae6a5c47a3e6ba26b2e6c191b7b614a9def99a8484ebd880ed25876c6a0224180446ed9fdd80989628859fa682afdb2452bc46c479621e
SSDEEP

98304:l4KTG7HFKZdCwCoz032nFip6vndFoC1wsxERvOcIdnLg5iWJlH:GedCwCm9Fiov7UvOcnoWz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd73e39c426736b3a1f6f8684f10cf54_JaffaCakes118

Files

bd73e39c426736b3a1f6f8684f10cf54_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 7.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.keguto
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vude
Size: 512B - Virtual size: 23B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.puxe
Size: 512B - Virtual size: 6B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vojigu
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ