ea62d43ef724c73e3a5f4731fab4e7d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea62d43ef724c73e3a5f4731fab4e7d8_JaffaCakes118
Size

31KB
MD5

ea62d43ef724c73e3a5f4731fab4e7d8
SHA1

b788d02ea28bf6244383ddd3b4fa192700bd2c4f
SHA256

8a38a3a7a34b981a8115e689e9fa09c4aa8b80271dbe03297d525e247596ac0d
SHA512

74f0ef6e4214102d9d1a9825cabab2e451dc5c61c0ede11a1a4813565bea1d37dd009e57e3f22a4c64a48cf8d67389bfe27d1296150894d8b0853c4ad7e1a614
SSDEEP

768:ML1r4Ymr/auI5xzNYNgHzpq/FkXaxQKanbdz3oJG8o:i14Ymmukxz6+HC+qS/nbl3UU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea62d43ef724c73e3a5f4731fab4e7d8_JaffaCakes118

Files

ea62d43ef724c73e3a5f4731fab4e7d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 593B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 526B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ