be0454dcb08487e40ca91f52ac76b099_JaffaCakes118 | Triage

Sharing

General

Target

be0454dcb08487e40ca91f52ac76b099_JaffaCakes118
Size

12KB
MD5

be0454dcb08487e40ca91f52ac76b099
SHA1

02ef08cd409db20194bdc6d1ae1a86892bfd9883
SHA256

5d5bdfb76a20c42d378dd40bffa598a90727e45ccf108214921860afc31a93ca
SHA512

559047d98e130e7862551f02bd152822dd8a3bfb9f85941962310e7e020877af6ca550ad344c2cfb9965f9c5ff53587c19fe745763feb0881711960740b6009a
SSDEEP

192:uDJ1ZKaBWgIoeY07yo24db7ttF7E66Zj82fK3AqQKbQIJZdF9QoL0ulE:uPQ7VM0RTh7tTpQI2EQKbQiPLL5lE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be0454dcb08487e40ca91f52ac76b099_JaffaCakes118

Files

be0454dcb08487e40ca91f52ac76b099_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 272KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ