bc8bf37a15eaf399ae4628a458075245_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc8bf37a15eaf399ae4628a458075245_JaffaCakes118
Size

978KB
MD5

bc8bf37a15eaf399ae4628a458075245
SHA1

cdcdef67e09e44c52da071e77eef0e99edb24ffc
SHA256

2cde551e2c2803dbd81845088817318bd9948024c6605146b6e7d2a7150a2dc5
SHA512

59483961cc091c1c7e72c18ff799adf82ecf3eb53d5e4e47bf1fee6039baf2162c2792b7ecf352ff632f751b9e40d71c9ccd2c58efaa3fcf66283bd46680a873
SSDEEP

12288:+lHFs28LWswDVVOiL37oUsClJw3gYep4V0sqDZFqdYeAdpfgqYzQKSbOTrFg7QAm:+lH2FL2d37oUsSJdkqdFqyKnBcONLd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc8bf37a15eaf399ae4628a458075245_JaffaCakes118

Files

bc8bf37a15eaf399ae4628a458075245_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 511KB - Virtual size: 511KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 413KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ