e72abe6eac1acdd9a7b426768ac3e9d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e72abe6eac1acdd9a7b426768ac3e9d3_JaffaCakes118
Size

2.2MB
MD5

e72abe6eac1acdd9a7b426768ac3e9d3
SHA1

e5800f497a6e99116acf23fd7578f915b47b09f0
SHA256

5b385ba98416a37e990310698cd469b58c5823be5d567a5606f150e5a58525ee
SHA512

4a0ac2e56748bc7d7c13d954dd6514411f5fe1833e7f4b138d18f3d778f152e056dc7d0f50e767550c7dc0c35d732c285f20b04248ff7e03ea1b89ed6abab4d5
SSDEEP

49152:BYb/OBImCOQewFay6GKEIhfb0wyI9Ko2P4RPe:CbCImCOQewFay6GQhfb0FI9KXke

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e72abe6eac1acdd9a7b426768ac3e9d3_JaffaCakes118

Files

e72abe6eac1acdd9a7b426768ac3e9d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 9.0MB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.
Size: 1024B - Virtual size: 765B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE