ec116ab3dc69c786f8098ea268093d78_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec116ab3dc69c786f8098ea268093d78_JaffaCakes118
Size

847KB
MD5

ec116ab3dc69c786f8098ea268093d78
SHA1

2cd4aa771690657a2262b86c3297be1596fd8d5e
SHA256

08a982580a2fc4fdb3f88bfcc28ec7afe3fea63be28803f35782bb126f17b2f4
SHA512

852a57cef3dd3c394e6078ba4309894f7260ded897b04b3d1f95d2ccb954e216bb0134e7cf55cf98aacb824fb2e222fdce3fef5c50060b0837830efbca997fed
SSDEEP

12288:lXmwRo+mv8QD4+0N46hcNReMqnLurG8OW9q1w1HmrDyPrk1hsy9hxderbfxfSDr3:lX48QE+ULcFqKC8O/CDrExd4fx43

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec116ab3dc69c786f8098ea268093d78_JaffaCakes118

Files

ec116ab3dc69c786f8098ea268093d78_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ