b9ee25ea47c04ea1150fbf2ec4ec4d03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9ee25ea47c04ea1150fbf2ec4ec4d03_JaffaCakes118
Size

880KB
MD5

b9ee25ea47c04ea1150fbf2ec4ec4d03
SHA1

1fcc8e61fb13581bc4af52f5941cc6d9dae61835
SHA256

cedcc577a8026e58f92e7f21d0d4d5ef2ff4182c83c263a24c816a8cdf4d50bb
SHA512

b8db97d8dbb974891d05edf6e3bc90c71f00f10c1e65a4b42f1f4404c90272ca3bdecec45c5732b2265ab5a9f641665372340b3708424ea75c3ecdfae2af41b7
SSDEEP

24576:OK34rDVUQineOa3f3ApDoZalc+W2qs0gdupsf:OK34r4nPa3vAVWai+hNzf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9ee25ea47c04ea1150fbf2ec4ec4d03_JaffaCakes118

Files

b9ee25ea47c04ea1150fbf2ec4ec4d03_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.bg7z7y
Size: 1KB - Virtual size: 824KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sbfebg
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 922.0MB

.data
Size: 87KB - Virtual size: 88KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE