bea02965b443608bbb2ee3ecf9b39202_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bea02965b443608bbb2ee3ecf9b39202_JaffaCakes118
Size

1.1MB
MD5

bea02965b443608bbb2ee3ecf9b39202
SHA1

6e98332ece51309d7a8927882c37c9c9af7e31a0
SHA256

abfe49cbfc9c80a1ef10c316b5e4f43a1fd9ef6b03d9a497540e08b6a24a0c83
SHA512

a7945b8ae21f58e69c0a179ccf0d4421eb025cb8cf296624e600c50a9f1627d8a5e1edee2308eae16f55b06421a0db63e3a837242345d3471d417a82471de7e1
SSDEEP

24576:zMKuV56HE1fGvondVHaiQPQUG+u7agh1IGYD+DM:zMKVk1d8UOd+DM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bea02965b443608bbb2ee3ecf9b39202_JaffaCakes118

Files

bea02965b443608bbb2ee3ecf9b39202_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 940KB - Virtual size: 939KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ