bb48c9f312bdafbd14b90d75202e0033_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb48c9f312bdafbd14b90d75202e0033_JaffaCakes118
Size

297KB
MD5

bb48c9f312bdafbd14b90d75202e0033
SHA1

9af9ffb0068ee06e22a9778fe9ad8c2c3d6b0e99
SHA256

30a23db19c70bbeaeca4d05df23cf99e9fab6cb2c4f92ef2e2d8354e9de9c35a
SHA512

588dbb3bbe8fdb88241e9052345f441b7b339c460bf611a008485fca18cca42f666c6e8bb589468bd7d670cc31b9719bf355a78d7ab30a3c4a8511e624d26340
SSDEEP

6144:H8yv4ksvUGxVZeDa0t8EYkpECEMnj05RoWfvh8EybgjmTr2bA22C:ca8VZeDaZET7/joRoDjUNA6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb48c9f312bdafbd14b90d75202e0033_JaffaCakes118

Files

bb48c9f312bdafbd14b90d75202e0033_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE