bf8b037cc7324137bc856c8f2665e12d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf8b037cc7324137bc856c8f2665e12d_JaffaCakes118
Size

46KB
MD5

bf8b037cc7324137bc856c8f2665e12d
SHA1

6fdc014d72ad854f18e6bad313f42f961177e44f
SHA256

5cf803370ce25bee8ffac79c0524d24aab2e4bab8a033b4b72fe020983162501
SHA512

ece87459cc922f39e9ec5f6aa91ba4ac3e11001c04a29b9d6b8f57272eb4b29bb22e85fb7ef2f14ebdcb609c7fd228d388fa0e8a483c10f983e913c8ddb50139
SSDEEP

768:g8EzNOTcvI4XY9ZLSpG4XkxXl0GdI2FwPyNqPdERh853Iql8GdjwLzw5/7/OQPu:gxp7YnLSpGqkxSyoow4PGdk47/dW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf8b037cc7324137bc856c8f2665e12d_JaffaCakes118

Files

bf8b037cc7324137bc856c8f2665e12d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 668KB - Virtual size: 668KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.6MB - Virtual size: 19.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ