bb6482f11d75abb8343c222e373b0d13_JaffaCakes118 | Triage

Sharing

General

Target

bb6482f11d75abb8343c222e373b0d13_JaffaCakes118
Size

748KB
MD5

bb6482f11d75abb8343c222e373b0d13
SHA1

a9876def2439cd305157c6d49b3fcb328431c50c
SHA256

582abcf53bf8ada15e9af4c0c7bc0680e5d15241f2556d31b5b339ac0d962830
SHA512

37de0adc42f08a09ed04525e7edbb225df14fe5c174adf6b3e0130107956d053cf7eced3fd34fb91cf6b1da2e811735cc35d82b1db5e0c58db892e6c72b51af4
SSDEEP

12288:FXS0kMwFkLJw3xdLYGEq+Zw91+iNnyP0MCjY76aEglF1twuu:4nM1LO/LYPxQn9nY6w/w7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb6482f11d75abb8343c222e373b0d13_JaffaCakes118

Files

bb6482f11d75abb8343c222e373b0d13_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 314KB - Virtual size: 313KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 397KB - Virtual size: 397KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ