e8a569238cb60194ccbd37debf1240bc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8a569238cb60194ccbd37debf1240bc_JaffaCakes118
Size

82KB
MD5

e8a569238cb60194ccbd37debf1240bc
SHA1

5c51c4a1ed2ab2a43665b14737697498f00bb61e
SHA256

e7c3287f1c7b44aa3528d91e3f41e2e2c849a9b0c5ddb0c8e814a1ec583cbf19
SHA512

3e1c8613390ddb7c5a001c02c001ad620ff7103773554d14143c1dc2a7ba1d84e7a300e26d27f5d5f8ea62a471a9d4cef0f2bd814cb288b9f0057c3489f9394c
SSDEEP

1536:RLjOVG1DbKd58XkId7cAn84fpB+7y8N79p6y2DuxCWV+kBYjLcS/aP:eGRkANCA84H+NN79p6y26xCWYg5YaP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8a569238cb60194ccbd37debf1240bc_JaffaCakes118

Files

e8a569238cb60194ccbd37debf1240bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 90KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ