eb4b30992d94664c4b483fe46193519f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb4b30992d94664c4b483fe46193519f_JaffaCakes118
Size

385KB
MD5

eb4b30992d94664c4b483fe46193519f
SHA1

69160c519f16db0225dee44adbb9d921411111f4
SHA256

a6f21b20cd0b5fd5849876488c5096d7b5d5cdab210df96acff3f2f7a0bbdeb8
SHA512

b2a4864da6bacfda66ad2af23a4de65f582dfcf73da7aa30f9abdf2591f361da984f99e5c28a8c87caca88e97d89ad2abebb0ffeb230b1e541451d399d91c3ad
SSDEEP

12288:cRV1rFeYRgqONE2z11yVuvR8y7lWvmPqtkB:cRTrF3aNbEMR8y7EAqKB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb4b30992d94664c4b483fe46193519f_JaffaCakes118

Files

eb4b30992d94664c4b483fe46193519f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ