bcb317be9f4dab052f3250132127d625_JaffaCakes118 | Triage

Sharing

General

Target

bcb317be9f4dab052f3250132127d625_JaffaCakes118
Size

695KB
MD5

bcb317be9f4dab052f3250132127d625
SHA1

209f31a3c414ae55d32a03b495fad261c03fc887
SHA256

6b4722a39c7e28be72b20d30a7ce978e72c4d891d5dd5e467e2d350a11115eda
SHA512

4314fd02eb697142e0a8bc23889ff285873ac24c85a92be579b85172107654fd596b91b41d45415a290d8eaca79773e04b69d51590fbd692283479421376b5be
SSDEEP

12288:TE5+qvRH+yLuXKfSiUSA8L5Em68WNz+EPAwrDApi58aHabTrPavmXHsNfnq:AQENRLuXKr5A868+z+EPAw3IpbTLKosA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcb317be9f4dab052f3250132127d625_JaffaCakes118

Files

bcb317be9f4dab052f3250132127d625_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 589KB - Virtual size: 589KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ