eaf6cd14259f01054a0927b9d03a9527_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eaf6cd14259f01054a0927b9d03a9527_JaffaCakes118
Size

809KB
MD5

eaf6cd14259f01054a0927b9d03a9527
SHA1

e76a5b2962d53f2615e771e9d718666b400d525b
SHA256

e1a20f98dedbcbd15301428dec5c21e8dbc0d08e6225cf5b5d7aa0f27a8add42
SHA512

da5f14339cf68e546351e6633738a576a8b9a043a6b270c093dc455d6c2cc9633f80d49fdad4c49abb5e3264f4f2893735200c72092a43b4be7bda69b90cc592
SSDEEP

24576:NAkB3IynQ3CxCsFcFy0LG2LhKyJeeX6w9:93ICQ3GLN0LGIT3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eaf6cd14259f01054a0927b9d03a9527_JaffaCakes118

Files

eaf6cd14259f01054a0927b9d03a9527_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.textbss
Size: - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 793KB - Virtual size: 796KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ