bf7fcc55de2089a8fcdaa2792fbb70c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf7fcc55de2089a8fcdaa2792fbb70c3_JaffaCakes118
Size

804KB
MD5

bf7fcc55de2089a8fcdaa2792fbb70c3
SHA1

d59fab364b5f101c2bdd56b321eb6468d2e382a5
SHA256

3b5462952bb5348db37310a8fd0b9a756e664ee7039600a9929aa98711c609e6
SHA512

392e175e3d5ea576d9732e822a40f3dcb9eac87999e6375d1849b6cbf7162182c45a505e4635f00dfd89b48cf7e4404138f5c84470b4952fe6117a3c974e3007
SSDEEP

12288:5cIUIcVyGvrVY3wmTmt7P4rciRpRx3FuvxUAw31Ds/Tt+o7fHHV1aaKMG3oY5:5MIkeAt1mVRyk10J+gfHHna8Y5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf7fcc55de2089a8fcdaa2792fbb70c3_JaffaCakes118

Files

bf7fcc55de2089a8fcdaa2792fbb70c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 717KB - Virtual size: 717KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ