bc8b73744947ab8d77fe956e080eddb7_JaffaCakes118 | Triage

Sharing

General

Target

bc8b73744947ab8d77fe956e080eddb7_JaffaCakes118
Size

677KB
MD5

bc8b73744947ab8d77fe956e080eddb7
SHA1

bd5db425a08731643d978400b4682f8ae8fcd802
SHA256

a17aa84b17b52cb9bdb3ec704477256c2b1bafa748f0f797b6459424bb78d21f
SHA512

8d662384d1e7ae31c87bbc4271cbceaf6909f26c527de6873771ae3e70d8033735d9fac3b86fe878d9f80a1ba79a789978937e51f96748f19e194e36ab32d28e
SSDEEP

6144:Y3i8X7pt4Oti0BWmKWIBtOcI9SSbA+cuXhOABM7xXYtyBHimdwwYHz:Y3TdtLW5WIj1YSSdFxOABSXyMHHfYT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc8b73744947ab8d77fe956e080eddb7_JaffaCakes118

Files

bc8b73744947ab8d77fe956e080eddb7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 193KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vc++
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vsp
Size: 74KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE