be4b3067bebc1765142de502c014fdde_JaffaCakes118 | Triage

Sharing

General

Target

be4b3067bebc1765142de502c014fdde_JaffaCakes118
Size

720KB
MD5

be4b3067bebc1765142de502c014fdde
SHA1

7f528a5e2497316bb55c111a862074c8c2e6f062
SHA256

207382e90bbedecce7a3430c4d0361534187f4ea854dddee2e82f22c9ee72d0e
SHA512

4dd5ab90388d8fa50ac7e6948010d3b2c1f3e78517da2ed1a1d325a2d4f9e3a438c15bc0c57718298e96be8cf1ccfa8072eb5a1ee9da013b1e0d162e825ae6af
SSDEEP

6144:Dtn2Ui01I4rYYGs4IuX+7Utda59cxVLtWLhjW+ScVi9XxvIKsAHpl:DthDrC1xdI9cftWljW+SF6KsA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be4b3067bebc1765142de502c014fdde_JaffaCakes118

Files

be4b3067bebc1765142de502c014fdde_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 210KB - Virtual size: 209KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ