bf7c62c47123675f24e6c4a152992058_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf7c62c47123675f24e6c4a152992058_JaffaCakes118
Size

56KB
MD5

bf7c62c47123675f24e6c4a152992058
SHA1

781b67649602c6a10d1ee24b322d24c829673d58
SHA256

3c5f9d68d13c910f257938270b4b9166af128605f039151188772c3db9f22c43
SHA512

90457290a30f7033df74cecbb939706afa40791ee302bff1a723e265270556dabf83bd0ba577a01a19c5eae5da3d0060d2f234659e57b3be8a61871824cc8766
SSDEEP

768:xzdEF95aZ75w8UuK1/VZy89G9s6bu90maxOYCq1jLECj4k:xmF95w7u3uyI9srud9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf7c62c47123675f24e6c4a152992058_JaffaCakes118

Files

bf7c62c47123675f24e6c4a152992058_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.zbyhuyb
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rqlvvcd
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flmltgy
Size: 2KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.diwrcbk
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qzmqgdf
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RPCrypt
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE