b8e91272db6cd8900250eee6a1c7d512_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8e91272db6cd8900250eee6a1c7d512_JaffaCakes118
Size

49KB
MD5

b8e91272db6cd8900250eee6a1c7d512
SHA1

a19d17c6fecbe5d746b1af166e261031e6375293
SHA256

3fe7f7c7cce459e1cb2f1635084f4298616837682b8e23c30ed1b015d183a90f
SHA512

deac2e69a4a9dc28b4c6e37149e8c4d8b8a2156199bd0be0f14cd31bf3c68c78c05c9189b877987afc818a4f87856d47f4ba0b1e8d8dcad7111aea85faf9b0f4
SSDEEP

1536:TTNdLfazOTAsreNeSg8jD0V6WZ4/D6lLpiCx4Ay2wH:HNdLfssreZHS9Z47QLw72wH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Demo/bctest.exe

Files

b8e91272db6cd8900250eee6a1c7d512_JaffaCakes118
.rar
95212771/FBARCODE.ZIP
.zip
Barcode.pas
.js
Demo/bctest.dpr
Demo/bctest.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 73B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Demo/bctest.res
Demo/main.dfm
Demo/main.pas
barcode.dcr
95212771/HSBarCode.zip
.zip
Demo/HSBarCodeDemo.cfg
Demo/HSBarCodeDemo.dof
Demo/HSBarCodeDemo.dpr
Demo/HSBarCodeDemo.res
Demo/Project1.res
Demo/Unit1.dfm
Demo/Unit1.pas
Src/HSBarCode.dpk
Src/HSBarCode.res
Src/uHSBarCodeImage.pas
.js
95212771/下载说明.htm
.html .js polyglot