bc9ad7403d1b1eb4e1dc84e900505963_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc9ad7403d1b1eb4e1dc84e900505963_JaffaCakes118
Size

72KB
MD5

bc9ad7403d1b1eb4e1dc84e900505963
SHA1

1beac5cfc565209955640cb802254a114f7b95b8
SHA256

cf3649e1d2e6122b08b283c20525b146ef2f07e9da253a6dd9c4c7734a056917
SHA512

fc18d32e091940d4f4228b8359ef6565d0c3ebec6385763026d639346d9b1690b4c91f098b70fc8e699f73face39a5ae28d24ee0809721c9053910efea11c507
SSDEEP

1536:WcqtK7S9K2JVpIrWSnToU9IGJBTBqsYgOU8xOjLcj4UKsKS:+1KCVFScU9LJ14sYeAOjLdUKsKS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc9ad7403d1b1eb4e1dc84e900505963_JaffaCakes118

Files

bc9ad7403d1b1eb4e1dc84e900505963_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 585KB - Virtual size: 585KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ