bd9eb8b9fbe6abad6b5b9eb692bb7983_JaffaCakes118 | Triage

Sharing

General

Target

bd9eb8b9fbe6abad6b5b9eb692bb7983_JaffaCakes118
Size

214KB
MD5

bd9eb8b9fbe6abad6b5b9eb692bb7983
SHA1

8cb79e50c894a5ada99577d2398394fe5086addc
SHA256

70e923b6ea32ed868fd7cc5d3ae0581a498761725fa91fb8c8ae9deb48357808
SHA512

0caa8b99947db8477a613c3ad5fa339865e024724431e0d73df22ecb62ad7b2c749097bda07e0718ec8ea83e2104dfb42ac53a3028fcefd0cd168fe186e25ffd
SSDEEP

6144:mRCfz9m9zPDvB0Ikc+gwFmvWGYI41u4QMiQ6Fxr:TzA9zPDvBktVFm+041PQMv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd9eb8b9fbe6abad6b5b9eb692bb7983_JaffaCakes118

Files

bd9eb8b9fbe6abad6b5b9eb692bb7983_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 97KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE