bbaa581f204dfd67349b0a3f1aabd487_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbaa581f204dfd67349b0a3f1aabd487_JaffaCakes118
Size

52KB
MD5

bbaa581f204dfd67349b0a3f1aabd487
SHA1

59cf148023b0f1f2e83c6630539a754939bd73c0
SHA256

58a478ca8f2af202a64eea5a5ab3f73bde0a90fa56aae540c22e452fe8c8c53f
SHA512

1fd411d0ca03763989ea3c19a245a80f36848fd2fad8bd1805ed0647dd84e28b967c8e4420ab0f02615a58a49ee25296cde32e17040c4f89e2d4b733ee3ab72f
SSDEEP

1536:nupn+qZARSKDTdqAblk+fqlQSE5VmyqFAPNjLTY:nupn7YSKDpqAm+fqfE5kyaWJg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbaa581f204dfd67349b0a3f1aabd487_JaffaCakes118

Files

bbaa581f204dfd67349b0a3f1aabd487_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data0
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 498B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE