bc7d20eee2be0027f481e15d3d8d7275_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc7d20eee2be0027f481e15d3d8d7275_JaffaCakes118
Size

339KB
MD5

bc7d20eee2be0027f481e15d3d8d7275
SHA1

27b3a9274fcc7451af86c2decad5ac186894268c
SHA256

a364dce03cd76cad9109b80829a84ad346374210e8445579e45ebfb90d73154c
SHA512

253ee3bbc2c63b09480895148b94beda6820b66539328d1446ab0f1b0af46db648c9c0d6c51507b31d8308c752438d7360fa7d349c591dff579ed9dea787364d
SSDEEP

6144:g1emcOuoVN67ChlbCF1fpyvNZ+tdgULgrOGSN8uiwRIRvjdIn:scOtj7CzfYqLuOGSa1wRIR7E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc7d20eee2be0027f481e15d3d8d7275_JaffaCakes118

Files

bc7d20eee2be0027f481e15d3d8d7275_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 313KB - Virtual size: 748KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE