be668b37a30c13d1d7a76535c577e795_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be668b37a30c13d1d7a76535c577e795_JaffaCakes118
Size

322KB
MD5

be668b37a30c13d1d7a76535c577e795
SHA1

8fd291eea2920ea0c6f6794c9e4c0339a3f7bb36
SHA256

22251307e8636ceb4e060859cdc88597d93898adf41d72c01b7792916a1e7812
SHA512

3884c3e0a6bd96f3abc6eb6ab135eb3f408e96b7b42e6008192b08afb8f7fb1a9cfebbbb6204c7676175b03fd7435f28795b93277d55e46067d409a757d66550
SSDEEP

6144:OTX153PmSvSnuRJ9Oa7/aY7PeNDbrZ+2fT9Fwwyp2JE/1BIcdZZ8T5d:Ox9P//9Oaz5b2bEYg7p2y/MO8T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be668b37a30c13d1d7a76535c577e795_JaffaCakes118

Files

be668b37a30c13d1d7a76535c577e795_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.fdata
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 175B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tdata
Size: 297KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ