baa221289aa473b5f41fc09d1aac40ab_JaffaCakes118 | Triage

Sharing

General

Target

baa221289aa473b5f41fc09d1aac40ab_JaffaCakes118
Size

456KB
MD5

baa221289aa473b5f41fc09d1aac40ab
SHA1

4b5e9fd3e0f4f1ac51e8f2aa5e1f111cd1a64375
SHA256

6d72a4e50ca04adb5807f9c1935b8743c2488875607a5d289025818c0cfda89c
SHA512

9d48d396364fcdf08ec62f479e777ee987e27de10b145a10ac3cd6dec6d56df6c49bc12b86179d8c16373ee41b5c680aa9150308d242cc9f6070c5b11c8507a3
SSDEEP

12288:jEVXKpmokgif4JgTIoq43H2cE05nMx11DGkfb7i:jEtRoiAJgMe3H2cJCx1YOb7i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baa221289aa473b5f41fc09d1aac40ab_JaffaCakes118

Files

baa221289aa473b5f41fc09d1aac40ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ