bf6da1c5cba40617452dc4b92de62a98_JaffaCakes118 | Triage

Sharing

General

Target

bf6da1c5cba40617452dc4b92de62a98_JaffaCakes118
Size

24KB
MD5

bf6da1c5cba40617452dc4b92de62a98
SHA1

07e17d246cac6e916cb0e8fd196e729529b7001c
SHA256

47176668846bf8b9e7b75a98fc501ab72f98c2dd4a9daf0bd3248dfb55050a35
SHA512

cf564e515646720d8cd3f11e03dda2bbbbbda1dc786c9527d8b87c7fb1ed0474bde1482cfd5f15d9eeaf620e50a5f6b7348a82ddbef55e0a91ea520319b9bf2d
SSDEEP

384:Zn2rUApmhwpcX7dgeYyzIJddM8AsNiOtR+xCbAn+AnxUvcXTmGFkXvkIXqa10KMO:B2UAY2ceeYRddM/IzR+xCbAn+Anxicj2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf6da1c5cba40617452dc4b92de62a98_JaffaCakes118

Files

bf6da1c5cba40617452dc4b92de62a98_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 670KB - Virtual size: 670KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20.3MB - Virtual size: 20.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ