ba08f391753098e8a90a949905748e0d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba08f391753098e8a90a949905748e0d_JaffaCakes118
Size

450KB
MD5

ba08f391753098e8a90a949905748e0d
SHA1

acc4ffaf00c5913199729c6681a68925d98b786b
SHA256

07384d4400301f8f5a0434eae49c88fab1c31d2dc55262cdb4a22915fca83a3a
SHA512

ce30208ddc93ba0df099603becca6e973ac2bb0f16cab510f019a68ab6cfdfa90d6bb61685b474b59960e4dd392285fe5b55518727f917dfa6f74f298a1fa521
SSDEEP

12288:y4fyzglKv4beYBJZL7q8CqLAn2rbitlX:Hk6beoHC8FQG2l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba08f391753098e8a90a949905748e0d_JaffaCakes118

Files

ba08f391753098e8a90a949905748e0d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ