bb8120189ba33a89782df5d9701794f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb8120189ba33a89782df5d9701794f9_JaffaCakes118
Size

279KB
MD5

bb8120189ba33a89782df5d9701794f9
SHA1

16a4188affc93fd7a34f9ccbd8c2abaac15f9072
SHA256

0a5ef42763f273f39ecc66dc89e0ed5f1b0913a2a91b567e689db4a5341bebd0
SHA512

e3ca45ef27137b29b257e37a320c740cf6f9dea7aee47eaf11fd80462c0b97ee935c2fae55139c94d38450ce43d6b392f3d69c882e8471f3228277fa80951185
SSDEEP

6144:iDGbCivzcoB8ayj04EDyGdwnSEXb89Ee3v/ZQLArE86:iDGrrPyj0H9dFErde3CLArE86

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb8120189ba33a89782df5d9701794f9_JaffaCakes118

Files

bb8120189ba33a89782df5d9701794f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.scpack
Size: 512B - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 270KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.newIID
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE