e7495d16c077a60d1655637610604f19_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e7495d16c077a60d1655637610604f19_JaffaCakes118
Size

67KB
MD5

e7495d16c077a60d1655637610604f19
SHA1

da2c5ceefd5733cdcb86b41e2b22420f0fc03155
SHA256

21c5114c6c3309d0e86b8b4a35296b64e56c324f8652f2995f741aec1957042b
SHA512

fcd57a28fabc72054592dad3711104b7de7ba5e116d98ca57e679e0625ded2c30bf6636bf15f75ac6cd06fc1b661fa6af1ff60f9cdffa7f8a4781ba8ff617a14
SSDEEP

768:hCpqtPQsw629jz6l+8rq6UpJ90QtkPVynPxZL+T7ESc4Lta8bwLxZRvhj6SCxwtK:opqFQVIlrqxuikP7T8hxdj6S9K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7495d16c077a60d1655637610604f19_JaffaCakes118

Files

e7495d16c077a60d1655637610604f19_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ