ebc559a91c97e5431c77fb90e399a4a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebc559a91c97e5431c77fb90e399a4a6_JaffaCakes118
Size

15KB
MD5

ebc559a91c97e5431c77fb90e399a4a6
SHA1

dee8917dd8a433354f39a40c10ab68b77f1d40c3
SHA256

351d1d44d239ba93c1dcb2f7613474cbd4b615b384fb7863a4e2a0b89ad6f040
SHA512

da49180dcb42878996bcd7ed9dd4149e4fc74763960c37ceebb8d7939aded0ec07800b752805d68ca57a176df9f61e6a7d1b430c15107349cc35149bec5dd524
SSDEEP

192:zZp2ZuQtp7SLaWszI2Bks74aDb9wHUI+316++8D/cxPMOjIy04JrG1I91D2cjDqC:H2ZuKp7oa9WsPinc1jc9ZjI91wYODqC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebc559a91c97e5431c77fb90e399a4a6_JaffaCakes118

Files

ebc559a91c97e5431c77fb90e399a4a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 1KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ap0x
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shoooo
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RErypter
Size: 41B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ