be1b1e031e8bd27e1b44ba4575a81871_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be1b1e031e8bd27e1b44ba4575a81871_JaffaCakes118
Size

112KB
MD5

be1b1e031e8bd27e1b44ba4575a81871
SHA1

2f07b9b9669607decee73a33d0be0dc9f61ebc98
SHA256

57fd2b58eeea7d147cb2d21c9f4b4c669f83c931de43ed3f98665381634d7f55
SHA512

f06e38c6b12a566b3e6554aabadea9c4a8d3b7b2a14eb6252384e50cb447721643126a7e765168dbf21daf9e529fcf12319e02fb2397ddd21ab15e049079adc5
SSDEEP

3072:5/sKLD5pQTpWa+7+2nMjr65wOF7656sm0H5VqeKYE:5/sKzQ8F7+2Mjr6OOFIM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be1b1e031e8bd27e1b44ba4575a81871_JaffaCakes118

Files

be1b1e031e8bd27e1b44ba4575a81871_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

code
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ

.itext
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE