ebb5979815099bfb26fd6ab96d90815d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebb5979815099bfb26fd6ab96d90815d_JaffaCakes118
Size

506KB
MD5

ebb5979815099bfb26fd6ab96d90815d
SHA1

f10ef57455da4a980cfd17d5ef2b554a1cde646c
SHA256

95c81606fc3e839b3993e04e8b0e442ecaa4bdecbcf2be29577871a9c9775e3e
SHA512

5c1c28bd0d8ecc58e6cb09cc6b221fb599af81c364a58f20e1f470915164aa17d5d5fb2568c640047447fc3cdd8e19ed4ab72ed7f1cc4c3439b774efc744f7a3
SSDEEP

12288:MyPKMQQCiWarD2MNMDzs14+OESMLawoaMGLbPm5:MyPKBx3arivoawoaJLI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebb5979815099bfb26fd6ab96d90815d_JaffaCakes118

Files

ebb5979815099bfb26fd6ab96d90815d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ