bbaa1d88f72fac5dd726a8ce489ee4a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbaa1d88f72fac5dd726a8ce489ee4a4_JaffaCakes118
Size

617KB
MD5

bbaa1d88f72fac5dd726a8ce489ee4a4
SHA1

2036e27483d04bbb4de17e70ef056c9e444bbae4
SHA256

3751f35ee51d26c9eae9190f4cc58fbf45a197b31f4bda242f34b4c86cf0d2cb
SHA512

6011c84e42254ba3341f051e6223f11d6f2a0ce94953b3a67c01f03dd3fd76d58fd727c6ea8a66c829427ecf10c13c94302fc966003b30d650e585eab42455c1
SSDEEP

12288:OYzchQVZnkmt/70MWugxPJZFpf0c1pHMbdJ8CA88fzsBsI3+Dc:B4KV5Hpt8bZHLU+CSfasO+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbaa1d88f72fac5dd726a8ce489ee4a4_JaffaCakes118

Files

bbaa1d88f72fac5dd726a8ce489ee4a4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ