ead198fb28ab2876afaf036a104e2ed8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ead198fb28ab2876afaf036a104e2ed8_JaffaCakes118
Size

385KB
MD5

ead198fb28ab2876afaf036a104e2ed8
SHA1

07d85144f631ab44cf1813082520a22fb61bd9c2
SHA256

41e9ce4083d5682f785469bbbdcbd530f40dfdadafbd7152f427d2f15b8b6c92
SHA512

d568fe4aa9fbd475aa1741f9b6a57a9c05cb0b02f5de90a348b139ed223970d4f3f5e27606499df0738c2ab7b97be2b29e989d9f8e0ab2f1aa636ccdadece09b
SSDEEP

12288:WZdckc1uXw7LPs9q03UkPiAPBurluFmfvSItHOwb6aVKWUd8IuooYPw85YjVtMBR:qdckc1uXw7LPs9qQUkPiAPBurluFmfvo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ead198fb28ab2876afaf036a104e2ed8_JaffaCakes118

Files

ead198fb28ab2876afaf036a104e2ed8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ