ea3cd8a72e5a29059dea3e338aa7de29_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea3cd8a72e5a29059dea3e338aa7de29_JaffaCakes118
Size

120KB
MD5

ea3cd8a72e5a29059dea3e338aa7de29
SHA1

766c35eab384d69e13e466b1933532d6ef860d1c
SHA256

7df3bbad300d23d408af57e8e8e1224bc5e85e6cade7287f2e13c32ef6e5f11f
SHA512

af7ab308b80c074335a1b49f2d1dd0b7726a907d8074bb401ccb55add06ca08f2103813515c7d94b2667623093096ff14a787b1fe391ad40a38db1ad7282248a
SSDEEP

3072:mMLz9ZMBkgyMUn+qh6YqjWsXxbDrRwX6H9kcsY5n6:mMX9A/zzzBbvzsw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea3cd8a72e5a29059dea3e338aa7de29_JaffaCakes118

Files

ea3cd8a72e5a29059dea3e338aa7de29_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: - Virtual size: 70KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 640B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 112KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 45KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ