ba98f08ad1f0e46ab1a6cb2ceec856d4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba98f08ad1f0e46ab1a6cb2ceec856d4_JaffaCakes118
Size

321KB
MD5

ba98f08ad1f0e46ab1a6cb2ceec856d4
SHA1

de18f932a51b126cf1bcc2702d46c4271e53718f
SHA256

c9a5af2885d809443cb3946effefbc4322deb0363c9264b61f4a2d9d2fb6ccd8
SHA512

f179525a79d3f01fd6dd9803ba826fb74709c945e66912cd9af38a595739c727cd893b36f43dceb3866bf7b2799fcbc73a5b36d24bb2db7490e647eac3b2bf9e
SSDEEP

6144:hWzVe+aj9BN2mrkcSenk78+y1cTMt2lTce+xfIyV9qq+c4Hntx0STK:hWzVutb7nk72ClAe2wyV9p+c+teSTK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba98f08ad1f0e46ab1a6cb2ceec856d4_JaffaCakes118

Files

ba98f08ad1f0e46ab1a6cb2ceec856d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.zdata
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ydata
Size: 297KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ