bc56bb120f0188a4b582021c3d846f91_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc56bb120f0188a4b582021c3d846f91_JaffaCakes118
Size

270KB
MD5

bc56bb120f0188a4b582021c3d846f91
SHA1

06056f94ecf976686d3179c1a47c2f5c5c8e87e2
SHA256

d34fdbdb7c06bf8f291a9737444a7336505396bd316814714a9c9acf15338c4a
SHA512

1c8f9dabc41f78aab44f918ca1363dd9a52d5d3913144f3b3415e44dd3b09ab3c3c84d7fcd8ae254b4012409771f0ea2642a57b700a2f3d959d79e09e755d0bc
SSDEEP

6144:CtLBs0IZ6JgsaIMhyllPNKogdebszVHGWMpiwtOWtSdEEzbq:Cbs0I8CbhyllPN4EIRHGVbDIua

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc56bb120f0188a4b582021c3d846f91_JaffaCakes118

Files

bc56bb120f0188a4b582021c3d846f91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 936KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 257KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ