bebad390edeb87c9c84443b34e7d69b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bebad390edeb87c9c84443b34e7d69b3_JaffaCakes118
Size

1.8MB
MD5

bebad390edeb87c9c84443b34e7d69b3
SHA1

e830e9aa605391be32bbd2ce410374dd7c74d123
SHA256

5b65d027827da1a984234d61b69831efffe2feba5401a9807293a1723ea65670
SHA512

d0f97143f5f1f65d2689182ed9d3907f4cab9c3c4000de82bf62ecb940eb58480c4e1b73a04c8b728746a2615f443b47872ce83ed1f8096ae75f3b5195a48a64
SSDEEP

24576:bIm/Ocew8RX6n0V3+QOlXc9qhD6fhZIHnQMufCLjdl4omxZurWZsL1K/gy:EJQQTVFoXcshD6fhZRfCLxl4ZxZu6ygr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bebad390edeb87c9c84443b34e7d69b3_JaffaCakes118

Files

bebad390edeb87c9c84443b34e7d69b3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\binaries.x86ret\bin\i386\Optimization\opt\bin\i386\vbc.pdb

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 219KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.khe
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE