be2c34eddfff4c8094927d3c6c739a59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be2c34eddfff4c8094927d3c6c739a59_JaffaCakes118
Size

945KB
MD5

be2c34eddfff4c8094927d3c6c739a59
SHA1

7fee29185e38e48b31355bb043fc9f33243cd8c5
SHA256

5a316626eb50d2fcd60b1beb29aeed827fbb886e3eb3a385487611274fd6a14b
SHA512

d6cf541ae194e0c48ef3ed00bb9bb4a2a09c011d4bc35404aa510a8d0f71a1e21e618ab7996eb28d6dd449b2ba55072b7d882de97b3ba1f9d636d204ebde8245
SSDEEP

24576:Ww8Ix9duzmz0XnTynMv3Ko0vsJLaSeAqdnds:WZVy4LaSEdnd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be2c34eddfff4c8094927d3c6c739a59_JaffaCakes118

Files

be2c34eddfff4c8094927d3c6c739a59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 789KB - Virtual size: 788KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ