bf8637abc8e50bdbb7f2191faf18c609_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf8637abc8e50bdbb7f2191faf18c609_JaffaCakes118
Size

210KB
MD5

bf8637abc8e50bdbb7f2191faf18c609
SHA1

63880f1f010f9aedc94527043f7c0237af27160f
SHA256

5c54fbce85c2466f26e24dd2fd510a22ee2a90402a21c3d30c62a1c22da619a9
SHA512

fe18d5c6c11b5f9b30104c091784337b9f62ca6f369f734fe15480e0062e0cd2b173f957565348fe370226048c02ec058c9c15b5e9954868a62d6694c6e28c4e
SSDEEP

3072:nUK3b4ZOipnKOPD663sknbfQBxY/o4JXQ1MsNSkSYfbS/NhxDNHCvuk48AuwkzDl:UqQOer+1kn0Bx5d1M9RqcNHWx+cl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf8637abc8e50bdbb7f2191faf18c609_JaffaCakes118

Files

bf8637abc8e50bdbb7f2191faf18c609_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 272KB - Virtual size: 604KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 269KB - Virtual size: 465KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

WinLicen
Size: 909KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE