bef26fea2621227022f9d5ca05eda5f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bef26fea2621227022f9d5ca05eda5f0_JaffaCakes118
Size

699KB
MD5

bef26fea2621227022f9d5ca05eda5f0
SHA1

2ff6644659a4ad5b7e90749c3cefb5b02eb329e4
SHA256

4840f5eeed4c2033b58449c601f7d473a1a64658aa37eba9407cacf9c7db2837
SHA512

2f6c6cc732c9903fafa8f5920465af89374511188c63779d5dc873fc4859cc1be662294d05b205992fca7488faef190bdd209026c5a25f1ce60e058e6dc4c0f8
SSDEEP

12288:HraYa++2jceMsX7Hqcfcm53KBRXjIj35cw8SU:Hv0eMsX7HHD53kR4c/SU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bef26fea2621227022f9d5ca05eda5f0_JaffaCakes118

Files

bef26fea2621227022f9d5ca05eda5f0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 237KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ