bc0e2e5ffa048dc7ed2330b9bf0ce717_JaffaCakes118 | Triage

Sharing

General

Target

bc0e2e5ffa048dc7ed2330b9bf0ce717_JaffaCakes118
Size

292KB
MD5

bc0e2e5ffa048dc7ed2330b9bf0ce717
SHA1

9d7f04d2fc307375f498cb247f56b5459eef2680
SHA256

a18b0e487d18d6656384d5b1039a4d0db4203669789a0e45c894e7675201cc18
SHA512

71d98552e118189f1773f9bbc7d28d5f9fcb29a59aa6503293b59f1846ef4a37ef7de8cd1f44c9014025b771d51fe50e35e430009c1ed48ccd8c20d0a3f4ba42
SSDEEP

6144:KXtV28NQJMCgnrEOjR5suI1PIRYhaZKicXBb+9w9soyKz88ELUgy:KD28NQJb4EOjR5Fk3Bbfzy2ELHy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc0e2e5ffa048dc7ed2330b9bf0ce717_JaffaCakes118

Files

bc0e2e5ffa048dc7ed2330b9bf0ce717_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

nulo
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

nulo
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 255B - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dnulo
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nnulo
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nulo
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ