bdc4a9af75fca83f443f6efcbcbd0689_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdc4a9af75fca83f443f6efcbcbd0689_JaffaCakes118
Size

85KB
MD5

bdc4a9af75fca83f443f6efcbcbd0689
SHA1

099fa6e664216056af2459297aa1173f4d5fd5b1
SHA256

19894a8b56b76f21f68801ce8bc8351377389ef649534f2226822dcf7878c059
SHA512

3148ba97782917240eff17229b78cdc79005c44e3f7b452359bd3022cd1ccf25bf3a1b00a60286d7dad5555452cf84f9f3310d22c9ce8d312f5e32eb21fe6ded
SSDEEP

1536:gzCqmQsMN7N6C/p/0zFV/NKSEXcvVaVjUChnEpoJlACczq:gklaN6KpczrVKlsvwphcoJmCcG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdc4a9af75fca83f443f6efcbcbd0689_JaffaCakes118

Files

bdc4a9af75fca83f443f6efcbcbd0689_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 847KB - Virtual size: 846KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ