eb7b5cd3c92b39c523df9298ef5fc6be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb7b5cd3c92b39c523df9298ef5fc6be_JaffaCakes118
Size

521KB
MD5

eb7b5cd3c92b39c523df9298ef5fc6be
SHA1

1f675939d00f68eccb7e581b3f7d95379242bac2
SHA256

435721f9bce3cca08cc53ecbbbd96072a6be881de661f583179c37c229fbd619
SHA512

f9ed42a952c09df93d2d6082bd4526cde21644a63ebde19670247b109ca3eece4bfc5f884439a2c9ff3d29ec59d71a444cfa14f126528a789a1360f77d878561
SSDEEP

12288:pA6ELxMfn3OxUUtwRroR33fGVQColEw1gC:6JtLxUUtwRy3vGVJ/weC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb7b5cd3c92b39c523df9298ef5fc6be_JaffaCakes118

Files

eb7b5cd3c92b39c523df9298ef5fc6be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 797KB - Virtual size: 797KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ