bc820c3e134511acf5057108cdd7ca32_JaffaCakes118 | Triage

Sharing

General

Target

bc820c3e134511acf5057108cdd7ca32_JaffaCakes118
Size

188KB
MD5

bc820c3e134511acf5057108cdd7ca32
SHA1

f66a7fba645487dd882062885152e3ad42340263
SHA256

588e2d15616286f9913b3b745e1aa0bce81e5d39c8ed5bdffa5368e50e4f0e08
SHA512

826d1d3cd7d4c415be400a8b1a6e619af614ca7e3cbc715fd617b2fd5b549351fad6d49aad30338a02aae851e5eeaf19eeb6770174afa5aea026b12e52427a34
SSDEEP

3072:3g1CWNK1z6eFlN7mkJkQZ3s8BgP9pG35g6AX/HganJC2HdkCsxxXDO5WmS+:3g15NpylNakqQNrObc5yX/HgaJCVpzXK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc820c3e134511acf5057108cdd7ca32_JaffaCakes118

Files

bc820c3e134511acf5057108cdd7ca32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ