bf1847c5fbf8dbddfd3786a0fd1d2162_JaffaCakes118 | Triage

Sharing

General

Target

bf1847c5fbf8dbddfd3786a0fd1d2162_JaffaCakes118
Size

19KB
MD5

bf1847c5fbf8dbddfd3786a0fd1d2162
SHA1

7f7768649370052dac36f40186ccb0a62112d001
SHA256

47509103325d9764107bb850832f7110aa85b7690da8f89b0b13b2443a1ddcb8
SHA512

c7f2d1756da7bc9bcb0eab9e85aa0248ae98952afb673adacd4549ef7d8afbf2ed755f16b1f913ac9fb06442c84305c8f4abcfa3ed4c268eb0ecda3ef1598121
SSDEEP

384:PfVeAsswPjqA4sWTD/DviOuz2lnz+H4TfkU:PNeAslyx7DviOKeyyf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf1847c5fbf8dbddfd3786a0fd1d2162_JaffaCakes118

Files

bf1847c5fbf8dbddfd3786a0fd1d2162_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 637KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ