be4df9ab26c0ca8c901456bc0ec27fcc_JaffaCakes118 | Triage

Sharing

General

Target

be4df9ab26c0ca8c901456bc0ec27fcc_JaffaCakes118
Size

425KB
MD5

be4df9ab26c0ca8c901456bc0ec27fcc
SHA1

8343277778940433c6696d0c057d11f459648a54
SHA256

0ec0dba5e290e63eac37b320ef749515149bab405426ded1492d74ffcf42295d
SHA512

a6bac12c6c0d99e49cc4e035697a4927470c51d4e025a79584c75876b5101cc1431185cad49c4ffb35e686ba7b15597574418d621c24f5a3435d4b5ccc3cc114
SSDEEP

6144:ZI6qhSX+YZm8va6CxLiRhZ5GqGGbhOCESl3HSDAcaeUgzoOcT4GgFkFuS6SlA:fqhSX7UBIRhZ5RxOEcaIz5GRuSPA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be4df9ab26c0ca8c901456bc0ec27fcc_JaffaCakes118

Files

be4df9ab26c0ca8c901456bc0ec27fcc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gay
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tqn
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE