bd67de38d4a9fd9ee71b9c8463110b14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd67de38d4a9fd9ee71b9c8463110b14_JaffaCakes118
Size

94KB
MD5

bd67de38d4a9fd9ee71b9c8463110b14
SHA1

acd11c542c4c8713d692d75ae0c6a2b64bbc3e72
SHA256

6bf1cdee2ed9ddc0ad56f0fd290863d5e0000464e8ef0f3dc06453438380ac6c
SHA512

e46bcd301a55a09bfd1c6770962110f1cbac017637b76f163964468b6b309728a3b861ac32333335ae35b23870923a069aa5b7771af3d4e6e597c3770a1b2aa5
SSDEEP

1536:eJEcZdaFk4w68KLwar9EtwmbBcU8QbRH+vxAGBcXQ3Ph10urmFIy:xcDMk4r19EtPdwvxRBcXQ3ptyFIy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd67de38d4a9fd9ee71b9c8463110b14_JaffaCakes118

Files

bd67de38d4a9fd9ee71b9c8463110b14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ