bd09c08ad6ebe6490d21f085cf1974a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd09c08ad6ebe6490d21f085cf1974a1_JaffaCakes118
Size

9.4MB
MD5

bd09c08ad6ebe6490d21f085cf1974a1
SHA1

f5a3b88ca896e57e9612daf5de7b0a6e3ded665a
SHA256

aa366b76844ab159599972cc08d116dece0c24048c87d140b08ed8e8bf90c3f6
SHA512

016e56db8c936dcf9bce3acea0e97fed8ab8a8c058e5413f81a162a561ae2b9b5360e5369022f056c638e9658f64fc2389ccdbe6050e2837c1fa33481aba0ab6
SSDEEP

6144:7Kuf6QauX2i+BMfIOxMbG8C1/ePfrnkuNWb:7Vf6Fumi+BMf5KS8OePfrku8b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd09c08ad6ebe6490d21f085cf1974a1_JaffaCakes118

Files

bd09c08ad6ebe6490d21f085cf1974a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 809B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 336KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9.0MB - Virtual size: 9.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ