bcd4b38fcb6fd1e182a4ea53eb4bcea6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcd4b38fcb6fd1e182a4ea53eb4bcea6_JaffaCakes118
Size

28KB
MD5

bcd4b38fcb6fd1e182a4ea53eb4bcea6
SHA1

41879e09016811e9999667a470e86aac48f169e3
SHA256

cd35f765b2ee39b9342c9c325603ff166bf096eb8feafccc444df2d8c9e295d3
SHA512

19ff1a80dd56a8fe035cde09134acc0edab4e4d634bfedb56b70e8d84ec816798289205605a99a48c17f3e4df528de94bd8c09e61ea1b0aab1a9bd9a499b389f
SSDEEP

384:l2MzJS+toBXqDIyAbBtC08B+iSiiIgBIT6R5g4BArjCwJ:lNzEANIjbBts+iYBSY5g4BQFJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcd4b38fcb6fd1e182a4ea53eb4bcea6_JaffaCakes118

Files

bcd4b38fcb6fd1e182a4ea53eb4bcea6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 13B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ