be199478ab561188599c8300a1e8a7be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be199478ab561188599c8300a1e8a7be_JaffaCakes118
Size

427KB
MD5

be199478ab561188599c8300a1e8a7be
SHA1

2c674d019b049b778afcb8262490d0b72bd9ecf1
SHA256

01fbec86ab39d21f5771244040c98f32e812654049c7046f6a011b83381c58d2
SHA512

142771eb36e5f8c8bf1f16e200611774214ca3f1554af7c8d5e0a149bd71eb6e6361dbb1e8ec1e23c3bfaff1a57327b80993d7866bb5cbd84aaca22fbf9c77c3
SSDEEP

6144:aiFUvYoYDm5v8DJtBTd8dbVTh2adDWAzuroj3zjlYL1Q3RJ:aigYLm5EDJtBJ8hrlurovhfRJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be199478ab561188599c8300a1e8a7be_JaffaCakes118

Files

be199478ab561188599c8300a1e8a7be_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 232KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ