bc7789953477148a3e70952c12b7841d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc7789953477148a3e70952c12b7841d_JaffaCakes118
Size

153KB
MD5

bc7789953477148a3e70952c12b7841d
SHA1

aa2521a5ab2b726c4b84db2077223b6d8fb1946c
SHA256

c24f04681289d6d20721ef3665c51e70b05ae5deb38bfd37b2a8acc5f44f572c
SHA512

807decfaafcdb861519069c63ad796e48937095b0cfadd96f2134ade9531cb5fdfdd1bb02d99a1626c18be6ac7cf4c4a8313ae536585f13386a23e06eba371c8
SSDEEP

3072:tnHsMi5QOVSsd5vPa+MW+Eiy9Fu3zD0LvSy4tWx:tm5VlnKRW+EUZy4wx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc7789953477148a3e70952c12b7841d_JaffaCakes118

Files

bc7789953477148a3e70952c12b7841d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.pflxxv
Size: 3KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.mvwejs
Size: 29B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qthsxx
Size: 100KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ