bc26078b1a383bb8334e799271bbd542_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc26078b1a383bb8334e799271bbd542_JaffaCakes118
Size

3.5MB
MD5

bc26078b1a383bb8334e799271bbd542
SHA1

c490231e281b333273d07eb42193c065a51823b8
SHA256

7850e130805bfa8d1a9847ae24fcbaf2c3e5d0f0ae385672fe8401bbe02414d0
SHA512

e18aad30a13b8ace424bec2c4c8bd5b6a1d737a8914e8c36c248234f64ef66407a2a4ab5c60204848e4def3874e3447f3e4259acbeef6475842bc6df708f03bb
SSDEEP

49152:S+jMLP2q4G9vZ0AK367jn6GlNJv4UWTgneLfWovFo1fk07mvBeS3J9:SR7ZPKq7jJNh4UW3f7Fo1r7a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc26078b1a383bb8334e799271bbd542_JaffaCakes118

Files

bc26078b1a383bb8334e799271bbd542_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1.1MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1013KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ