baa9da9809eb4c780c2a9d2d3497768d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

baa9da9809eb4c780c2a9d2d3497768d_JaffaCakes118
Size

378KB
MD5

baa9da9809eb4c780c2a9d2d3497768d
SHA1

c53a7a5d62e6da47714633e517ac92a0b6b74d90
SHA256

893240bdd86e6289b2cad3e93b83e2ba396d7535f15dce8b5d835366cb2d2e30
SHA512

2173aacb63794a6a177f9025a78175714c095949813890061daca06b0d7aa3efc5f5cf13cb74a513fc83e4e64733cc66ed810e312503008f9d37c64914dc6bf5
SSDEEP

6144:IlhaInZuNSzu1/V9N1NEBuloyOkogaP0+YnAfEn57sUfObWc/0/iCgCl:ihaIINSC1N9+yvQ0+O7so80qCgo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baa9da9809eb4c780c2a9d2d3497768d_JaffaCakes118

Files

baa9da9809eb4c780c2a9d2d3497768d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 320KB - Virtual size: 319KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ