eb863680566cb570b5b2bf0ce6c45f89_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb863680566cb570b5b2bf0ce6c45f89_JaffaCakes118
Size

385KB
MD5

eb863680566cb570b5b2bf0ce6c45f89
SHA1

664b269385b816e1d457a70af37152538bebc23a
SHA256

4d0809cc4ed4dd89a11700f71c750c36b1b9da66382b0a956be75d184b882975
SHA512

d2b69a772014a96acceac068417fbe5d50b088be9eb425e6b29e47a58bb4bf1559c2c4fd7c52ec50aeddd489cf791a9c9b19fe683a0084305b17cd8c569dabc2
SSDEEP

6144:AA3qguBd63Tt3Sqf6+iNpzsyPrBinn/AyZl/S0TGPv8A58cGr8rmFXJ1xmHB:Av9dMgVzpPdfyZlhTGPvXaPXJ0B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb863680566cb570b5b2bf0ce6c45f89_JaffaCakes118

Files

eb863680566cb570b5b2bf0ce6c45f89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ