bbf7a6b930bdd7dbe953247a8c524911_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbf7a6b930bdd7dbe953247a8c524911_JaffaCakes118
Size

32KB
MD5

bbf7a6b930bdd7dbe953247a8c524911
SHA1

b8949e51ed74be4111ed40d6925ece8f7447ccdc
SHA256

9b81ff79c0410150cfe9bc562f8e3f0f645d595a0155f145b8005703db08e06a
SHA512

b47c33ca3945264595a6920f40d7a4653a905fbe1d8c8bc80dcb521e1c44ccda8616e9c3d557722240ff9f58257508fb8b734809b20bea0f726c0b0dd7590311
SSDEEP

768:xVXCVGcnrdGkADzcEufx9ikjt9Ro4hUdUOGcEX7uXY43f:HXsGcnBGrrmxYkjrRdYY4v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbf7a6b930bdd7dbe953247a8c524911_JaffaCakes118

Files

bbf7a6b930bdd7dbe953247a8c524911_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 275KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ