be9451f136ed19317b3bdc748adcab29_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be9451f136ed19317b3bdc748adcab29_JaffaCakes118
Size

1.5MB
MD5

be9451f136ed19317b3bdc748adcab29
SHA1

f61f63f0c7448832e582fd53a3d806f2746930f6
SHA256

facc34021eebd30759ba9ec2aa0b4119dc23002a5d96712c5b03a8f020a4fa12
SHA512

4836ad28dc19592a28dc576950f2314e0759b458190e2f0bce8beace0f27fccf8b4dbab836b528861563a8f06c5fdf1ecb7ea0df8bf95d49d9619c7828dd719e
SSDEEP

12288:/XLVt4RIENT+scOTu7KM/oHjVFcABzeUG7ztYgJEe+gMOdpyk+GZyk+GQNKv:vpWRj3TuReYABKbEeDt/LFZLFQNK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be9451f136ed19317b3bdc748adcab29_JaffaCakes118

Files

be9451f136ed19317b3bdc748adcab29_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 601KB - Virtual size: 600KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 920KB - Virtual size: 920KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ