bd18b3739a796439fb1ead1cbe67095e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd18b3739a796439fb1ead1cbe67095e_JaffaCakes118
Size

1.7MB
MD5

bd18b3739a796439fb1ead1cbe67095e
SHA1

729530b17fc863ba507e63d683186796e6fe3c0a
SHA256

14920d7cb47e1d6ae9789077e205cfd201adf57de0b4802e388e68bfaf136352
SHA512

17252982d0a3774fe0bc6b1b5846c8a1d0a4d326048560e3b6c846812b166f95fd2660edec2d4d0ba9b0c55648a5dab20a75a466f9de52b2db53ab1450c1625f
SSDEEP

49152:rVFNSEyFLDUSUvjjeE6bGyqADKUyCgIu7:rVSNQLXNylNmIu7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd18b3739a796439fb1ead1cbe67095e_JaffaCakes118

Files

bd18b3739a796439fb1ead1cbe67095e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.7MB - Virtual size: 14.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ccp3p
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ficken
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE