ba850c0f1b60b937159cd31af03a21c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba850c0f1b60b937159cd31af03a21c7_JaffaCakes118
Size

185KB
MD5

ba850c0f1b60b937159cd31af03a21c7
SHA1

20bd43cee2f1fd73756ec4e27c23d6500a216eba
SHA256

ca3b56e4b1fb029e72950264f81c767dc698126ae8e7e0471f21d5480136db89
SHA512

6f0aac7e45d55f44dae6317de63fb246ccfd6a6d19686f7c270225406b2f32d0e6e841cd99f6395fd54c074a219cee4e07b8ec688ebf0d57c19de02ec00865cf
SSDEEP

3072:UQmh2BwvqF6XQso/3zJEFiMfmRpgSz9gwvfIocR0QyX+5uDzDSaT:UBcKo6As0tWiMuRphRvfISVlDzDSaT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba850c0f1b60b937159cd31af03a21c7_JaffaCakes118

Files

ba850c0f1b60b937159cd31af03a21c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 631KB - Virtual size: 631KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ