be465b1288808acd840172b1cd3da9be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be465b1288808acd840172b1cd3da9be_JaffaCakes118
Size

295KB
MD5

be465b1288808acd840172b1cd3da9be
SHA1

849dc6bc8a82aa7b3c77a792e49731012f28eb2f
SHA256

a0f085bef270d52a0461ebc5a2c8076647a0f73a6d3a511afd8e8be1d0aceb70
SHA512

152bf736fcdc9a99facdb2a97d7d687387b3e56de35873777ff21605894d2526fd0d7b66949e047c979c7994bfcb005fdb27bf06229743bb207f4b7fb83a59ac
SSDEEP

6144:ilAPLWd2MmU6JUgwo2Kyhyyyyy2lLtdF2Uv5bvZ:UAOmpP2Xv/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be465b1288808acd840172b1cd3da9be_JaffaCakes118

Files

be465b1288808acd840172b1cd3da9be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 180B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE