be8bcac391a875abd94680eff545d62f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be8bcac391a875abd94680eff545d62f_JaffaCakes118
Size

7.4MB
MD5

be8bcac391a875abd94680eff545d62f
SHA1

db3f836f73879d491ccde8bee39fc9daaa6e7a67
SHA256

6fff75150c4bfa373eb2126c13ea46522f8d1b8120f38b370ad9284cafa7e174
SHA512

5223b9979cc28dbbe51ea29759a9f03895f6148ecbac8dabb72c9496d3469c2b6b7cfdbd5dc88ad149dd085ac925fe565e06526bc442dec5cd30fb00b6f9e617
SSDEEP

196608:DcbyF/8y/czd7WbteFuDk9p5vEcI19uObEQ:DcbG0vp7WheFukp5vEcI/H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be8bcac391a875abd94680eff545d62f_JaffaCakes118

Files

be8bcac391a875abd94680eff545d62f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 844B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 962B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 67B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ