bc4a10a41281fa7ff36e23540d796634_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc4a10a41281fa7ff36e23540d796634_JaffaCakes118
Size

2.0MB
MD5

bc4a10a41281fa7ff36e23540d796634
SHA1

d97bf2088c9b2767022980ceb11fa30beb840da0
SHA256

185d75eb876bc31725d4ccaac7726d8b688c3e1fc513426053d6dfd8c2e9e0e5
SHA512

e83937a7d0094f700dca4ff34920f2c958e8d436d3f32c96ecab23be7cc20c8720bfae6b1f481e358cdff6c920bbe62acc7a980948911281eb76f7463186e909
SSDEEP

49152:Nsi0WR0y3Q9Q8ElGnIxoyNgPPBKZ64OdTWwJGZxwV:mWRNQi0nsM5KZyawV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc4a10a41281fa7ff36e23540d796634_JaffaCakes118

Files

bc4a10a41281fa7ff36e23540d796634_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 48KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

MSPRINT
Size: 526KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE