be01b30522267394d6500abac74181b7_JaffaCakes118 | Triage

Sharing

General

Target

be01b30522267394d6500abac74181b7_JaffaCakes118
Size

92KB
MD5

be01b30522267394d6500abac74181b7
SHA1

40e34e31b216303f05bd31e860b5b23ad3853189
SHA256

f7e12e18130732db18bc936d96583cb6c2dc3fe80b2e80ac38c68ea7202a8824
SHA512

dce21558bd7f71db1239eef031999447724a4ad1bbddf39ddb9f069d66844cdfc94f6e502cc23fb5f1ceea50a7af2753fbb1e829130173e90e77aafa23592d69
SSDEEP

1536:ns/TT3TNTJKk67gEPty7jllC64RtN230UxL7XWG+hcp4ulFbp0vunDissi2:s/TLRpOPKA64RtNU1W7hcp4KrnKv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be01b30522267394d6500abac74181b7_JaffaCakes118

Files

be01b30522267394d6500abac74181b7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 702KB - Virtual size: 701KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 662KB - Virtual size: 661KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ