bb54b825e1517eedee0dcf4e05b6f066_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb54b825e1517eedee0dcf4e05b6f066_JaffaCakes118
Size

85KB
MD5

bb54b825e1517eedee0dcf4e05b6f066
SHA1

47eca77e841b1d19dbc210b7be3eaa1185363c7f
SHA256

9eba77e1b9a306aad7270fe01aad1c1b93e89ece9c685207686fd85fcab26fa2
SHA512

68dcea8c57ed44ec19dc8f11d7f23e083ed3b125a03dccdebadaf59a796ccf33b3bd0e1240be020c6ea0c621ccd2f3bac2cf3726f8ce21a04f078728452336b6
SSDEEP

1536:z+ohYwPJqmUTr6bTkSY9rnloanpes1PFuaeOX8a5QD3rhVepuZCKTdH/kNTIn2i:y1q7UT6TkdZlo2DNuae1a5QTrWAsKTd3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb54b825e1517eedee0dcf4e05b6f066_JaffaCakes118

Files

bb54b825e1517eedee0dcf4e05b6f066_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 321B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ