eb6ddf582ac22b5cb5569a65897b56c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb6ddf582ac22b5cb5569a65897b56c6_JaffaCakes118
Size

175KB
MD5

eb6ddf582ac22b5cb5569a65897b56c6
SHA1

3c7b0b27149a5783cb196a947e6e9fe068b4b2bd
SHA256

a46bbbf69a5e8105f65d1692b4fdadbfc0ce5cead3d0c465d83e1d1b5421e3f1
SHA512

3e4e2bfb4a8d0ea7b02341b2994647e4bd928105fe9ad674f12424090ba5b98f9810ec1a1d18b4823737281b3646f4869f14bdbdfbb624747406ef76195202b4
SSDEEP

3072:9/vagd9N3TD3URwWAdX1RJJCQH9mbd40:9/SgljwRwdX/1H9s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb6ddf582ac22b5cb5569a65897b56c6_JaffaCakes118

Files

eb6ddf582ac22b5cb5569a65897b56c6_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ