e93487c72a085c40f9d8ed5e2b65dfae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e93487c72a085c40f9d8ed5e2b65dfae_JaffaCakes118
Size

385KB
MD5

e93487c72a085c40f9d8ed5e2b65dfae
SHA1

874235ca096b551f45e045122590ac0bae241da4
SHA256

05bf76bbe6ea4368fab09ca3c76abfbeaa04452ae87bca7af99ed04ccd5ed3e1
SHA512

788e97f8d05f8c8e88b15c8930b18e2b84aa9bf041bfcca688c414edcbbfb8a426ee57bd1ba848b071ca413ddffd10a68949037cc2f9a8437e9a327d1bd247d6
SSDEEP

6144:mckdL2/8QqE/5eVGduGOLgxMNUO+7TwV3krK6Dld6w4pHhCC5n7fZCMw+SpF7B:mcWNKGGO9NI03X6S5n5nBw+AF7B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e93487c72a085c40f9d8ed5e2b65dfae_JaffaCakes118

Files

e93487c72a085c40f9d8ed5e2b65dfae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ