bed098a239f72903e4a2e6cde89affce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bed098a239f72903e4a2e6cde89affce_JaffaCakes118
Size

5.2MB
MD5

bed098a239f72903e4a2e6cde89affce
SHA1

590447314aada6d0fd333bd7baf4ff54e3d186c2
SHA256

54754d6591b3e89e2d59ad9a759ed567fec4b3eac1ccc68372dc714e5935bacd
SHA512

a047d86cea8c0003229f31c20a9547373bb23ede8192bbff5b965b37adcc536765ff03b6b8d03dd10b8d7492fe690c7f693391e29ddae6b3aacd26a52a1c0d62
SSDEEP

49152:V4gTnY4gT014gT0Up4gT27Y4gT014QT2Q4gT0Up4gT2L4gT2cY4A4gT2cv4AY4Ay:V4ChnCxieH1oHyChnC9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bed098a239f72903e4a2e6cde89affce_JaffaCakes118

Files

bed098a239f72903e4a2e6cde89affce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ