bdc5cbdf3d184063056db9b8d1062b5a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdc5cbdf3d184063056db9b8d1062b5a_JaffaCakes118
Size

97KB
MD5

bdc5cbdf3d184063056db9b8d1062b5a
SHA1

9b79d321c19456ca74dc2c6c54e26b0ea0bd1673
SHA256

ede2e1053bc3e5fcda930762761008989e19d2a2703b16ce5b3478cbe37b272c
SHA512

b5f485eeb4cb7d725d4941ece0895b2f8db90cbeefeff4a570314a91f157cc6c5ad7dbb7203085a57ca2203639d408e079c76b0b0695f6a8dc2b8ade787b60a3
SSDEEP

3072:k0bNMgU2zwuz0K1sIgojECb+p6EgXQnaY3kMJd0mK9j:koNH0fIgmUfB3hr0dV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdc5cbdf3d184063056db9b8d1062b5a_JaffaCakes118

Files

bdc5cbdf3d184063056db9b8d1062b5a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 512B - Virtual size: 291B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ