bae8661810028fe03cf6e156b871c9d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bae8661810028fe03cf6e156b871c9d2_JaffaCakes118
Size

126KB
MD5

bae8661810028fe03cf6e156b871c9d2
SHA1

3532f827b864f004de9768bd97380210b2c62127
SHA256

605b607c8c10ed2e83696e3cc15e8f8615189e8139114218ac8af8787589a2c5
SHA512

3afc3e242b624bed99c0a1aa96ab91e45f5e8bbb5ae51f75b9eebd588074926b941ed256af208602055f923ffb7b16d6b1bff77a85d3dccee58e3b4fad15c44b
SSDEEP

3072:n+ZAI1GTOdOCXbPbzMc5x4ojCmc2fnFU/1T3onU1swEskhJyj+NO0j:nKAIFrPbwc5yO1BfEmUWwEskOj+NO0j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bae8661810028fe03cf6e156b871c9d2_JaffaCakes118

Files

bae8661810028fe03cf6e156b871c9d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 30KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 58B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ