bde95db49288f12328f76d4a3154af80_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bde95db49288f12328f76d4a3154af80_JaffaCakes118
Size

967KB
MD5

bde95db49288f12328f76d4a3154af80
SHA1

26b11fabc18247531c29c91adc7efbf3e3b469de
SHA256

c02254955054dcbfc724bb2eb521a987cb2e8114445d2c3d1c17192dd4f740c4
SHA512

ecba984fe04d888a3cf68ef733c9eaf34193762e6acf134fd3d55b5781cea9a60b4c5ef7299d22628c1bff9464075a15414847ccb2b7d4f3dd02111382a3bcfc
SSDEEP

12288:+7PdH9Y8xCtZv7bVsNRLZc5lLreHgNVn81iFFN0kw4urXuN9qdAl+Bc9Vo2i2C2w:WrY7Zv7IRLZc36H+8SNBwtndAp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bde95db49288f12328f76d4a3154af80_JaffaCakes118

Files

bde95db49288f12328f76d4a3154af80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 691KB - Virtual size: 690KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.WYCao
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ