bed1133bf5f2a8c3f051f30c85c7f463_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bed1133bf5f2a8c3f051f30c85c7f463_JaffaCakes118
Size

107KB
MD5

bed1133bf5f2a8c3f051f30c85c7f463
SHA1

bbe1da3d5365c92b759865f0a081dff5b3a869ea
SHA256

66d79a717d7a127a9a0a330b08649dd613a3b59a205d86f99dfad9f75e849018
SHA512

05a0fef64df2bf03c05f0ea3892d34eeed67435c4109bf38df9b8b90eadee5ecf3408e1d06564abee33432e978eeb5bbba9af8b0bc85dd6fabbdc65c1a35f528
SSDEEP

1536:Uef+ewwsATI6vFDPSx7vQT5lj23wZQ+Py2zHSNYqzJM:Tf+eQevFAc5lj23wm+hzHSNYE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bed1133bf5f2a8c3f051f30c85c7f463_JaffaCakes118

Files

bed1133bf5f2a8c3f051f30c85c7f463_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 5KB - Virtual size: 116KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE