ba2db64ee67af4f16be61edd38d6c64c_JaffaCakes118 | Triage

Sharing

General

Target

ba2db64ee67af4f16be61edd38d6c64c_JaffaCakes118
Size

311KB
MD5

ba2db64ee67af4f16be61edd38d6c64c
SHA1

8a4adc9d9463e0d15207a4d022125aad7ae2beaa
SHA256

70da3104984cea94b717e1c3614a0e7730187e141d0ccffb465565d250ec5c68
SHA512

4a8030bb0684b3124f2233bd44859c422470cb49c2eb715be36f7f215ccdb7dcff55a193978927c81c4905dffc470c72aa9cac7e275f8d1d9d7fc4d8a6aedd81
SSDEEP

6144:nS/3wVyBTl40pPKMHLdL1hALe+2NirdrQdZMwUKD0tD:nm3myr4wKMdoLT2NKcGw0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba2db64ee67af4f16be61edd38d6c64c_JaffaCakes118

Files

ba2db64ee67af4f16be61edd38d6c64c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE