bccdcafda19e7f0eb685d624e02c39e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bccdcafda19e7f0eb685d624e02c39e6_JaffaCakes118
Size

173KB
MD5

bccdcafda19e7f0eb685d624e02c39e6
SHA1

25fc70dd7fc8353318ee8e064065ae68c56051f7
SHA256

b84c592514fb146e986a813401bee49f297e0a7ddce591159e727a098055dd01
SHA512

8be562476070e530a7acb818a20afe77a92d84454a6592852ac6090dfbb481dbc53c8bb89bfdfb7841294b69e5229c2bcd728f7a98da37f95228211b3834dc3b
SSDEEP

3072:pcPWJ8t6fkk+t1Mp64c8NzTfEM0b3IHTQirbgjWZ7Z:p2s8k+t1Y64c85fEl3IzzrEyZd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bccdcafda19e7f0eb685d624e02c39e6_JaffaCakes118

Files

bccdcafda19e7f0eb685d624e02c39e6_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Documents and Settings\crenoud\Desktop\SourceMTA\VOMBA\code\projets\contextuel_popper\exe\src\URLComponentFF3\ADVFF3Component\Release\ADVFF3Component.pdb

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ