bf8c5d777392a1405c24cb7024946e94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf8c5d777392a1405c24cb7024946e94_JaffaCakes118
Size

447KB
MD5

bf8c5d777392a1405c24cb7024946e94
SHA1

77dedd0510a05ef187dea20165eac68ab5672849
SHA256

e89c458a8bd919378a071327cc48f1f723a99ed636580702d2324826a52546c4
SHA512

5f3df78485fe69808e0f5000380ba980f246274e100eb024d5e7e8c0495826f3b3a747e32633f4e88db9a320e27fae12df6f73cf6f0dd6197c731ab4d24b11f0
SSDEEP

6144:+EeyGeg/XCl/QyNOVa+jBjXMTraMNd70PJTnitsK3fH1OvdGSLbMZJ1r/V/:+EeyoC/QyNOVa+5X6dWgVUdGTZJ1r/J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf8c5d777392a1405c24cb7024946e94_JaffaCakes118

Files

bf8c5d777392a1405c24cb7024946e94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.petite
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE