be7ae70090c7ba12b9f95d8b135479d5_JaffaCakes118 | Triage

Sharing

General

Target

be7ae70090c7ba12b9f95d8b135479d5_JaffaCakes118
Size

23KB
MD5

be7ae70090c7ba12b9f95d8b135479d5
SHA1

c51e1ae85660e0350902e05ab37efe04a8976126
SHA256

496f640d9b16b8c95dfd54f9343ca886a478fde067b5263e1b1e005a4204f752
SHA512

063434faf2631bd89fa540f83062cd08d704601af58bb0ff903b629c63c02fbe040d48c9a972de425c9c58e9bf4f9dbdd5ad9a9ca85440a7c20bba4fd8a83cf5
SSDEEP

384:WMzTPSF0Y9O/r4UOFrjf96C231VBMgQ8FAMssRjEIo2MuAvOhCl6QQvoTcpHTazg:PQl904UOFfV6C61QYAMGluAwClFQv6ch

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be7ae70090c7ba12b9f95d8b135479d5_JaffaCakes118

Files

be7ae70090c7ba12b9f95d8b135479d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.share
Size: 20KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fasm
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data?
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 913B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ