bd78b1da13673753c74a35e0c57e078a_JaffaCakes118 | Triage

Sharing

General

Target

bd78b1da13673753c74a35e0c57e078a_JaffaCakes118
Size

516KB
MD5

bd78b1da13673753c74a35e0c57e078a
SHA1

4ca11a348883b508f445cc5e85aff71248c9139e
SHA256

57a43dfcce1bfa76d6735d8913c5d1bbbd9652b89e7836df946f7bf9ae511f2a
SHA512

296585a8096a75a439e87a8678737e1839a7a0cf54cc1acbb569c197ef4faa3955c660700b8b37b602a1b4d12d9f10a649d01d4ad78e0b0b7bbba52cc567f0c3
SSDEEP

12288:AV72gTBQ+X1mqwMa3XfsY2dAsm4SwApV9GEacV:qZTrX1m3Ma3X9QAsmXwApnXV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd78b1da13673753c74a35e0c57e078a_JaffaCakes118

Files

bd78b1da13673753c74a35e0c57e078a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 366KB - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 56B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ