bc4c5025b113ba17d4762c8d020d86a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc4c5025b113ba17d4762c8d020d86a2_JaffaCakes118
Size

30KB
MD5

bc4c5025b113ba17d4762c8d020d86a2
SHA1

285c5fe3119ec55d1c4f708b11c15348802693ec
SHA256

3381a502b024190c9f2c5ddff189c0637cc1be14006cd7af757d9d8362887bfe
SHA512

fbf23ad59983c084862050a24bd81d91d1d09b7b28940070340e0cb509b2ea04921f978380a35c2f8309c29bb5954b7e6c26bbe5811fafc754fe5754868f376e
SSDEEP

768:9XKbQ33OGR/8liQqf4wZxJ+xF4XuO5l8ffn:gs35R8wQGlxJ+b4ewlYfn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc4c5025b113ba17d4762c8d020d86a2_JaffaCakes118

Files

bc4c5025b113ba17d4762c8d020d86a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.qtunzug
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.qiwuwfk
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bsafbta
Size: 4KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tdnfhiw
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE