eb6106d7f062044475659fffd4279d7b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb6106d7f062044475659fffd4279d7b_JaffaCakes118
Size

2.7MB
MD5

eb6106d7f062044475659fffd4279d7b
SHA1

1b82883649efc64fa0c072f54333969901b4b0c9
SHA256

540e7749b286bf42fac55a3c80cace17c8be824909aa0ea531055e34bf71af1b
SHA512

a69b9d4277519e0087e2529257fc60c84038bf9447e68d9e491ca8f4814b4218e3d00d2a1fcaf2265e13477b429f698133f235c866060106fe290cfdda242113
SSDEEP

49152:0jLDGOt8dUUIJ2hnoYENKVL7GWOnH8le+B7Ec44yyCMg:0jOD2jmnoRKVL7GL+B7Ec44/CM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb6106d7f062044475659fffd4279d7b_JaffaCakes118

Files

eb6106d7f062044475659fffd4279d7b_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ