be5241c3eb242b0995012a7bcd485e9d_JaffaCakes118 | Triage

Sharing

General

Target

be5241c3eb242b0995012a7bcd485e9d_JaffaCakes118
Size

635KB
MD5

be5241c3eb242b0995012a7bcd485e9d
SHA1

1bf80004c822b5c4f1add4b2b78dd7a2649f05f5
SHA256

c9ef26f8907e094a5eaddb5653a13f0694a1ce019f568a50b5732bf0040fe123
SHA512

d6413820af2be699861c7faf665672a8ab6d0003dd9d9019e7e215c24979aff98bbb4d456a8b775c1db9b5b79182a20ca30be36fed636730747b644908f39541
SSDEEP

12288:T4fN2E/e8p3I4OCmnbAATTyWiOZQTI6k9Mx9Eu833LWOo:UVRepCIbVNi5Tbl1OLWOo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be5241c3eb242b0995012a7bcd485e9d_JaffaCakes118

Files

be5241c3eb242b0995012a7bcd485e9d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 956KB - Virtual size: 956KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 36B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 362KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ