befecb881944910d4879f0fef1ed3610_JaffaCakes118 | Triage

Sharing

General

Target

befecb881944910d4879f0fef1ed3610_JaffaCakes118
Size

176KB
MD5

befecb881944910d4879f0fef1ed3610
SHA1

087778cad2644e927f718c9dd74648f00a234835
SHA256

f6b0796709f6fe2f46a625ab0c7b0e286da4570017ec9982c2991adf6075df4d
SHA512

dc3fef1ac179fb8d3a908c4f3fae9730b9c68e5f0e3c4ba6673b66e1da0a5f37f35ed675c669b7958c3fb8b389f9677f65d95656f1e6f194927962d14288b81b
SSDEEP

3072:ghtg9me0HibXgAZ4+2Q7glYe+34otMLtRXRWnpyhW+9oox:ggQirgAm+2Qf4BmpV+9os

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
befecb881944910d4879f0fef1ed3610_JaffaCakes118

Files

befecb881944910d4879f0fef1ed3610_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 2KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 658.0MB

.rdata
Size: 144KB - Virtual size: 148KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE