bb5932576e24b1fa161e4b2a89584ca9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb5932576e24b1fa161e4b2a89584ca9_JaffaCakes118
Size

481KB
MD5

bb5932576e24b1fa161e4b2a89584ca9
SHA1

bea9f18c3515ca0a993771e589190da833677b1b
SHA256

12d46d45f806bf1b02a0ef3f2ad7634070a629535513afdf340c15571bfb2bac
SHA512

680f536165a5ca24c14218b36a881332957d15b410c37f9841b5f0843ca4a0d836e212fd0caeac8bcd363e85147d524a8196369728fdf2a92a707d3a24ac3595
SSDEEP

12288:OrF9UdWj8/gvWlqr5l6echTSU9u+T/n8:SFydWZvWOq6+T/n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb5932576e24b1fa161e4b2a89584ca9_JaffaCakes118

Files

bb5932576e24b1fa161e4b2a89584ca9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 333KB - Virtual size: 333KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ