be4b7b13993806b6d6bdcfbbe055c516_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be4b7b13993806b6d6bdcfbbe055c516_JaffaCakes118
Size

3.7MB
MD5

be4b7b13993806b6d6bdcfbbe055c516
SHA1

989382752235d4dec06579d26176ee352606f99c
SHA256

d2e5f2c728c5e40e64eb04813a8407a0cf7deda770b97d1ecc94bd9534d36c88
SHA512

697672236aeca9cf367391ffde2cb961c80a84f3ea25505cf204ee41eb680ab050727bcbf340c5c0adc3ec61a4e115fa49d79d68e62ee17635f0ff141d4482e3
SSDEEP

98304:YHrNrozMMD3HzezA/aB5+RJU7Sf6VH8Je+VEZzsk/goec0KMgM8zPg:RAMjHzezDeY8J6Zn+cBMgM8z4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be4b7b13993806b6d6bdcfbbe055c516_JaffaCakes118

Files

be4b7b13993806b6d6bdcfbbe055c516_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 685KB - Virtual size: 684KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 289KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ