be421c746833256a865757703bc67127_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be421c746833256a865757703bc67127_JaffaCakes118
Size

192KB
MD5

be421c746833256a865757703bc67127
SHA1

3eeba6d0e99688c170d4efbb16ddc785c931b723
SHA256

b062aa58c0a1e726c748a6a2f37f833ed02447444a978413fe1c05e8b305264f
SHA512

ed0400dd634df8574604556ca72caa7463859c306d6c7c389d5ee987fd0acdfbe4f2c4071ab7b9e8f772465940933c08cfcb915eb04c02c40fa0eded1d9267f7
SSDEEP

6144:COxDF1uxQccvaGqvOW3gYMcri9uloiM+STyWuOguD:LxccvIOW3gRc+9u2iM+QEOp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be421c746833256a865757703bc67127_JaffaCakes118

Files

be421c746833256a865757703bc67127_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

shutdown.pdb

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uro
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE