bec80e0e8fb0110674930808f3b27c4b_JaffaCakes118 | Triage

Sharing

General

Target

bec80e0e8fb0110674930808f3b27c4b_JaffaCakes118
Size

428KB
MD5

bec80e0e8fb0110674930808f3b27c4b
SHA1

305e33bc1c253a80795871ff9df07f7212ec9acc
SHA256

eb193e759a375fdbda998fccb60498cc5e218e6e4a1715dbc09b743ecbd331ac
SHA512

421b174a2e96228b924feff439839d11836c39db12381b430b0be991656447cbd61451a14e21d90f7b0f7a52e7d74d0aefee0f74a7247da6fc34046ef6cf79e5
SSDEEP

12288:ZjWkTLlCYQEetEuYFQX/N46ziZQqpwgrOmvfvx9OL:1LlCYCtEuYFizW/wwdx9OL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bec80e0e8fb0110674930808f3b27c4b_JaffaCakes118

Files

bec80e0e8fb0110674930808f3b27c4b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 445KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9.1MB - Virtual size: 9.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ