bdc6b64fe99d17c16782e7c1af333320_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdc6b64fe99d17c16782e7c1af333320_JaffaCakes118
Size

528KB
MD5

bdc6b64fe99d17c16782e7c1af333320
SHA1

80f48bbd54cabc43be11b87c9db0f1e76887145e
SHA256

e964fc1f16fdcf1e67be5339c704be82ca83667a159f8e5ca5f21fc96ec55ff9
SHA512

665bd9e5e77dc0de0392ec1f6fd2319d193f0065e87b1065af624ce51e0e49f92bfb6322a8ea7a5f2f799072ac09094e56f01fe62a9b69217f7d33d47c433ea2
SSDEEP

12288:6LHk8FOkvWBEMFT/+0wh2DhqpnAToZ8QmGg:6rQsWqMx/+0wS88QmV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdc6b64fe99d17c16782e7c1af333320_JaffaCakes118

Files

bdc6b64fe99d17c16782e7c1af333320_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 481KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ