be8162ebb72fafdad214679e6f6dfac2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be8162ebb72fafdad214679e6f6dfac2_JaffaCakes118
Size

3.3MB
MD5

be8162ebb72fafdad214679e6f6dfac2
SHA1

49b07d2282bfbdbbadbcd015a616f38e877f0f51
SHA256

e92de01ecd8b2bcd6e76a3df1f33590c43a1d55efdb41824afbae5e3dac7d424
SHA512

a53cc3fe4b18a2b978a427a581f0814b4226cc7c254be210f2958097953812a7674099869a28e1ec23ecb1bfd20176d862ff2db43d53216f1804eaff3a9ac9dd
SSDEEP

49152:N3INxQ7tqTvzUYeufB7kh4KA0PoQyZXmib9f3jSVDiABGJqT5+GP:N+gCzUYeufB7kh4KA0gQyZTfCWA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be8162ebb72fafdad214679e6f6dfac2_JaffaCakes118

Files

be8162ebb72fafdad214679e6f6dfac2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ