ea4f49a1c795543d54711d494a4d540f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea4f49a1c795543d54711d494a4d540f_JaffaCakes118
Size

506KB
MD5

ea4f49a1c795543d54711d494a4d540f
SHA1

46fe238c5521d4194ca21d4f3b95684935165c1e
SHA256

8fdf276506d388a71025373a77ff457d2b64240123a33ee945eec40b76bcd383
SHA512

a4b53d7ace852b9372001d646466dce836631883b4f9f64331dfffed5aad855e2a320f767dbdb68844f6c7d8631d2491dc4e65f6c2860d4c4e2191052ef885cc
SSDEEP

12288:Eupyy2u9clbg5Bo2L+QUX8MC/NmzaZm0gL1vsZ4:H9j9Ag5e1aepK4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea4f49a1c795543d54711d494a4d540f_JaffaCakes118

Files

ea4f49a1c795543d54711d494a4d540f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ