ea514e5b6c6547618ac6d5ea7f92d5a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea514e5b6c6547618ac6d5ea7f92d5a4_JaffaCakes118
Size

904KB
MD5

ea514e5b6c6547618ac6d5ea7f92d5a4
SHA1

59847173dee7ff5a626c011c2ad8e398c067245b
SHA256

e6e577268254139fee7bd63e6f7cb8f9961309214a0852f0f7178a2c6d3c8740
SHA512

a50b03e1760e2f1289da283631100280dbac8c0a8332c1cd0ded87aa2be560247d8a728e9c69023e7bca92d170483416fa982eeb0c3c0ae5e2ad0523e205a7fa
SSDEEP

3072:ft2cWtTBfVkfqM2SCAygRjlIqZoFzJcqrJ:hWtTBdsqEPxjjoFzf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea514e5b6c6547618ac6d5ea7f92d5a4_JaffaCakes118

Files

ea514e5b6c6547618ac6d5ea7f92d5a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 465KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ