bc4566c331dd3b21e11afaefff0bfd7e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc4566c331dd3b21e11afaefff0bfd7e_JaffaCakes118
Size

609KB
MD5

bc4566c331dd3b21e11afaefff0bfd7e
SHA1

a4a58ca8bf21e7016c9f2bc3ad073f6062056795
SHA256

5b3d94fda00be0b22c7bbb5423d79979f82f8050d16f8926ff98ab04d562eb76
SHA512

7bed0a5c5134df4798b3fcf98a07b2563c3b957c67390a7fff038adafc1c4c4033608b2721028bfed43bd56054973a2e983966066a062570d2d7dbdfcfc0feb3
SSDEEP

12288:GqDWecMS5sl1fpyWkruTtZhohQTlCf7qOjNqYcjgUT:faJO1fp/ZtTl87qwNpNUT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc4566c331dd3b21e11afaefff0bfd7e_JaffaCakes118

Files

bc4566c331dd3b21e11afaefff0bfd7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

p:\magicjack_release_2_0_x(source)\target\releaseunicode\win32\Splash.pdb

Sections

.text
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pmj
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE