ea0f1023314e24465ad7c683b0728df2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea0f1023314e24465ad7c683b0728df2_JaffaCakes118
Size

487KB
MD5

ea0f1023314e24465ad7c683b0728df2
SHA1

c1112f384827ed9d8fe9a93c9a63373ff1e2b38b
SHA256

67f0cc15f4bd1a2941f45b909958f5a4d5cf385c956f261d45e28d750b7f5f90
SHA512

d67fae9e9f6756df28d1c21ca837e12cad75d49eb6952ee577b9889ccadc8bd13774c962a7dd4ab2bd38be4dfb2f688af285f4aa2173af3748e1e389bca80af2
SSDEEP

6144:Ohk7rKPP1faFk9MsWmS3y2RgMtZwFAqRZ6m+4enoJib1HE/5EIq8QeIj2nfO+BEB:kk7ykYsEUOB2Zj2nT+L9vs/Sd2Rqk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea0f1023314e24465ad7c683b0728df2_JaffaCakes118

Files

ea0f1023314e24465ad7c683b0728df2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 6KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PeCrypt
Size: 466KB - Virtual size: 468KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE