e95fdaccd06a02b9213f35b3ad5a5e42_JaffaCakes118 | Triage

Sharing

General

Target

e95fdaccd06a02b9213f35b3ad5a5e42_JaffaCakes118
Size

1018KB
MD5

e95fdaccd06a02b9213f35b3ad5a5e42
SHA1

3025509cafbb445f2821c4df809956d56af390d5
SHA256

a581934c7f1ae59562c421c3cd97909447d10b2f65c1176f8dd03ccfae71d752
SHA512

4c45f6791e24bf756a1c339245f072e9cb7693b39540de3c4b39f1bcc4f9dc19432eaa95bf40851498803b8817b9adccc783bfc8900ca64420f8f811997d8149
SSDEEP

12288:X7NSSVh4UJA3S4D/bz+oqMnqtpbft7LRtsluydULFZUcNpRBVvRzCbAZw:rRQUJAbbz+YqbbWU+UTNRzxZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e95fdaccd06a02b9213f35b3ad5a5e42_JaffaCakes118

Files

e95fdaccd06a02b9213f35b3ad5a5e42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EurekaLog_PasswordRequestEvent
ExceptionManager

Sections

CODE
Size: 826KB - Virtual size: 825KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 10KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 234B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ