be57fa085fb920f685849530754402cb_JaffaCakes118 | Triage

Sharing

General

Target

be57fa085fb920f685849530754402cb_JaffaCakes118
Size

36KB
MD5

be57fa085fb920f685849530754402cb
SHA1

ac75e0854ae98e16dff34146401a15671b998fa0
SHA256

123f817817442f8a144d4711e7e337462552fe6c0ce0d0b12b20f97031ae0d36
SHA512

50f32bc7a48756b8b2fe3cb28a97e2be3f8abe567bbbf988d817a89b67efb8f2f11043be5fd95a2ac40126c662c2e6dccd0a0abad623dbccb9b2a8b54edb6f75
SSDEEP

768:6SM8dC7ViSD53ZLSzfrPvPUgsMxs+j2Hd2g+Gh:6SbC7Vnd2zvPUF7HELK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be57fa085fb920f685849530754402cb_JaffaCakes118

Files

be57fa085fb920f685849530754402cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ